CVE-2019-16900

Description

References

• code610.blogspot.com/2019/09/crashing-webaccesshmi-designer-21931.html · Third Party Advisory

More vulnerabilities in webaccess/hmi designer

• CVE-2021-33004HIGH 7.8The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow a…
• CVE-2021-33002HIGH 7.8Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code. User int…
• CVE-2021-33000HIGH 7.8Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code exe…
• CVE-2020-16229HIGH 7.8Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user …
• CVE-2020-16217HIGH 7.8Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project fi…