TI-2021-12610 CVE-2021-33002 · GHSA-rv7f-8vhf-g8q8
Out-of-bounds write in WebAccess HMI Designer
Priority LOW 36
Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code.
Vulnerabilities
12 records
TI-2021-12612 CVE-2021-33004 · GHSA-q569-xrrr-6gvr
Memory corruption in WebAccess HMI Designer
Priority LOW 36
The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow an attacker to execute arbitrary code.
TI-2021-12608 CVE-2021-33000 · GHSA-v5mq-7f48-6rhv
Heap-based buffer overflow in WebAccess HMI Designer
Priority LOW 36
Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution.
TI-2020-12758 CVE-2020-16229 · GHSA-3xqp-cq53-77h7
Type confusion in Advantech WebAccess HMI Designer
Priority LOW 39
Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior.
TI-2020-12736 CVE-2020-16207 · GHSA-48gx-vpm5-hv8j
Heap-based buffer overflow in Advantech WebAccess HMI Designer
Priority MEDIUM 40
Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior.
TI-2020-12740 CVE-2020-16211 · GHSA-84qq-m3p7-pqjh
Out-of-bounds read in Advantech WebAccess HMI Designer
Priority LOW 27
Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior.
TI-2020-12742 CVE-2020-16213 · GHSA-rr87-5vgp-mf73
Out-of-bounds write in Advantech WebAccess HMI Designer
Priority LOW 39
Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior.
TI-2020-12744 CVE-2020-16215 · GHSA-256w-3jc2-hh38
Stack-based buffer overflow in Advantech WebAccess HMI Designer
Priority MEDIUM 41
Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior.
TI-2020-12746 CVE-2020-16217 · GHSA-x86f-qwr2-rrx4
Double free in Advantech WebAccess HMI Designer
Priority LOW 39
Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior.
TI-2019-12602 CVE-2019-16899 · GHSA-4cgw-685p-gvqc
In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code…
Priority LOW 36
In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PM_V3!CTagInfoThreadBase::GetNICInfo+0x0000000000512918.
TI-2019-12603 CVE-2019-16900 · GHSA-jh8q-56fp-xqg3
Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x000000000000015c.
Priority LOW 36
Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x000000000000015c.
TI-2019-12604 CVE-2019-16901 · GHSA-j9c6-4m8h-r73j
Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting…
Priority LOW 36
Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x0000000000000000 called from ntdll!RtlRaiseStatus+0x00000000000000b4.