CVE-2019-10996CWE-416

Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user…

High · published September 23, 2019

CVSS v3.1
7.8
EPSS
1%
Percentile
62.8
In the wild
Unconfirmed
What it is

Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that can reference memory after it has been freed.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01010 · 62.8th percentile
Weakness
CWE-416 · Use After Free
Published
2019-09-23T15:58Z
EPSS history
Timeline
  • 23 SEP 15:58Z
    Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user…
    cvelistv5