CVE-2019-16900

概要

参考情報

• code610.blogspot.com/2019/09/crashing-webaccesshmi-designer-21931.html · Third Party Advisory

webaccess/hmi designer のその他の脆弱性

• CVE-2021-33004高 7.8The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow a…
• CVE-2021-33002高 7.8Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code. User int…
• CVE-2021-33000高 7.8Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code exe…
• CVE-2020-16229高 7.8Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user …
• CVE-2020-16217高 7.8Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project fi…