CVE-2020-10637

2020-04-1516:44:02

CWE-125

icscert

www.cve.org

AI Score

5.4

Confidence

High

EPSS

0.002

Percentile

51.9%

JSON

Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product.

CNA Affected

[
  {
    "product": "Eaton HMiSoft VU3 (HMIVU3 runtime not impacted)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "HMiSoft VU3 Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues."
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/icsa-20-105-01