The vulnerability of the software package for creating human-machine interfaces, Advantech WebAccess HMI Designer, relates to a repeated memory release mechanism, allowing an attacker to execute arbitrary code.

The vulnerability of the software package for creating human-machine interfaces, Advantech WebAccess HMI Designer, arises due to repeated memory release. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using specially crafted .pm3 files...

Advantech WebAccess stack buffer overflow vulnerability (CNVD-2018-11703)

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A stack buffer overflow vulnerability exists in Advantech...

The vulnerability of the software package for creating human-machine interfaces, Advantech WebAccess HMI Designer, arises from data writing beyond the buffer boundaries into memory. This allows a malicious actor to execute arbitrary code.

The vulnerability of the software package for creating human-machine interfaces, Advantech WebAccess HMI Designer, arises from data writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted .pm3 files...

CVE-2017-5175

Advantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an attacker to run a malicious DLL file within the search path resulting in execution of arbitrary code...

CVE-2017-5175

Advantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an attacker to run a malicious DLL file within the search path resulting in execution of arbitrary code...

The vulnerability of the VBWinExec function in the software for remote monitoring of Advantech WebAccess allows a hacker to execute arbitrary commands on the operating system.

The vulnerability of the VBWinExec function Node\AspVBObj.dll in the software for remote monitoring of Advantech WebAccess is related to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute...

Advantech WebAccess HMI Designer Arbitrary Code Execution Vulnerability

Advantech WebAccess HMI Designer is a human machine interface HMI runtime development software. An arbitrary code execution vulnerability exists in Advantech WebAccess HMI Designer 2.1.7.32 and prior versions when handling specially crafted .pm3 files, which can cause the system to write outside ...

Advantech WebAccess HMI Designer Heap Buffer Overflow Vulnerability

Advantech WebAccess HMI Designer is a human machine interface HMI runtime development software. A heap buffer overflow vulnerability exists in Advantech WebAccess HMI Designer 2.1.7.32 and prior versions when handling specially crafted .pm3 files, which can be exploited by an attacker to remotely...

CVE-2018-8833

Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

CVE-2018-8837

Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buffer area and may allow remote code execution...

CVE-2018-8833

Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

CVE-2018-8835

Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

CVE-2018-8835

Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

CVE-2018-8837

Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buffer area and may allow remote code execution...

CVE-2018-8835

Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

CVE-2018-8833

Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

Double free

Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

CVE-2018-8835

Advantech WebAccess HMI Designer 2.1.7.32 and prior are affected by a double‑free vulnerability in processing specially crafted .pm3 files, which may allow remote code execution. CVE-2018-8835. The issue is caused by improper handling during file processing and is highlighted alongside other vuln...

CVE-2018-8833

Advantech WebAccess HMI Designer (Version 2.1.7.32 and earlier) contains a heap-based buffer overflow when processing specially crafted .pm3 files, which can lead to remote code execution. The CVE-2018-8833 entry is supported by multiple sources in connected documents (CNVD/CVELIST/NVD) that desc...

CVE-2018-8837

CVE-2018-8837 affects Advantech WebAccess HMI Designer (versions 2.1.7.32 and earlier). The root cause is an out-of-bounds write (CWE-787) triggered by processing specially crafted .pm3 files, potentially leading to remote code execution. Public sources in the connected documents corroborate the ...