| Package | Affected versions | Patched versions |
|---|---|---|
| dream report | = 3.21= 3.41= 3.42≤ 3.43 | |
| wonderware hmi reports | ≤ 3.42.835.0304 |
Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows user-assisted remote attackers to execute arbitrary code via a malformed file that triggers a "write access violation."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free