Vulnerabilities

TI-2018-10644 CVE-2018-14814 · GHSA-95vv-pcp5-5fh4

Out-of-bounds read in WECON Technology PI Studio HMI

LOW 32

WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation of user-supplied data, which may result in a read past the end of an allocated object.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01468 Published 2019-03-27 No fix listed CWE-125

TI-2018-12721 CVE-2018-17889 · GHSA-8j9h-qgqg-vvwq

XML external entity injection in WECON PI Studio HMI

LOW 27

In WECON Technology Co., Ltd.

CVSS 3.0MEDIUM 5.3 Network No auth User interaction EPSS 0.01248 Published 2018-10-08 No fix listed CWE-611

TI-2018-10648 CVE-2018-14818 · GHSA-mq6h-9xw9-9gqm

Stack-based buffer overflow in WECON PI Studio HMI

MEDIUM 48

WECON Technology Co., Ltd.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03494 Published 2018-10-08 No fix listed CWE-121

TI-2018-10640 CVE-2018-14810 · GHSA-5f5v-7w3c-2rm9

Out-of-bounds write in WECON PI Studio HMI

MEDIUM 41