CVE-2018-8835

2018-04-2500:00:00

CWE-415

icscert

www.cve.org

8.1 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.1%

JSON

Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution.

CNA Affected

[
  {
    "product": "Advantech WebAccess HMI Designer",
    "vendor": "ICS-CERT",
    "versions": [
      {
        "status": "affected",
        "version": "Advantech WebAccess HMI Designer, Version 2.1.7.32 and prior."
      }
    ]
  }
]