CVE-2020-16207

概要

参考情報

• us-cert.cisa.gov/ics/advisories/icsa-20-219-02 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-20-950 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-20-951 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-20-955 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-20-958 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-20-959 · Third Party Advisory

webaccess/hmi designer のその他の脆弱性

• CVE-2021-33004高 7.8The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow a…
• CVE-2021-33002高 7.8Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code. User int…
• CVE-2021-33000高 7.8Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code exe…
• CVE-2020-16229高 7.8Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user …
• CVE-2020-16217高 7.8Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project fi…