Advantech: >> Webaccess/hmi Designer >> 2.1.9.95 Security Vulnerabilities
Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).
CVSS Score
7.8
EPSS Score
0.005
Published
2021-06-24
Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code. User interaction is require on the WebAccess HMI Designer (versions 2.1.9.95 and prior).
CVSS Score
7.8
EPSS Score
0.003
Published
2021-06-24
The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow an attacker to execute arbitrary code. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).
CVSS Score
7.8
EPSS Score
0.004
Published
2021-06-24