CVE-2018-8837

2018-04-2500:00:00

CWE-787

icscert

www.cve.org

0.003 Low

EPSS

Percentile

69.2%

JSON

Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buffer area and may allow remote code execution.

CNA Affected

[
  {
    "product": "Advantech WebAccess HMI Designer",
    "vendor": "ICS-CERT",
    "versions": [
      {
        "status": "affected",
        "version": "Advantech WebAccess HMI Designer, Version 2.1.7.32 and prior."
      }
    ]
  }
]

References

www.securityfocus.com/bid/103972

ics-cert.us-cert.gov/advisories/ICSA-18-114-03

0.003 Low

EPSS

Percentile

69.2%

JSON

Related for CVELIST:CVE-2018-8837