CVE-2020-16217

Description

References

• us-cert.cisa.gov/ics/advisories/icsa-20-219-02 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-20-952 · Third Party Advisory

Altre vulnerabilità di webaccess/hmi designer

• CVE-2021-33004ALTO 7.8The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow a…
• CVE-2021-33002ALTO 7.8Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code. User int…
• CVE-2021-33000ALTO 7.8Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code exe…
• CVE-2020-16229ALTO 7.8Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user …
• CVE-2020-16215ALTO 7.8Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user …