CVE-2020-16215

Description

References

• us-cert.cisa.gov/ics/advisories/icsa-20-219-02 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-20-953 · Third Party Advisory

More vulnerabilities in webaccess/hmi designer

• CVE-2021-33004HIGH 7.8The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow a…
• CVE-2021-33002HIGH 7.8Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code. User int…
• CVE-2021-33000HIGH 7.8Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code exe…
• CVE-2020-16229HIGH 7.8Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user …
• CVE-2020-16217HIGH 7.8Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project fi…