CVE-2019-16901: Improper Handling of Exceptional Conditions

Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x0000000000000000 called from ntdll!RtlRaiseStatus+0x00000000000000b4...

CVE-2019-16899: Undefined Security Weakness

In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PMV3!CTagInfoThreadBase::GetNICInfo+0x0000000000512918...

CVE-2019-16900: Undefined Security Weakness

Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x000000000000015c...

PT-2019-3570

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/HMI Designer version 2.1.9.31 Description The issue is related to Exception Handler Chain corruption in the Advantech WebAccess/HMI Designer, specifically involving the ntdll!RtlRaiseStatus function. This corruption can be...

PT-2019-3569

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/HMI Designer version 2.1.9.31 Description The issue is related to the MSVCR90!memcpy function and is associated with a buffer overflow in memory. This can be exploited by a remote attacker to cause a denial of service...

PT-2019-3568

Name of the Vulnerable Software and Affected Versions Advantech WebAccess HMI Designer version 2.1.9.31 Description The issue is related to a buffer overflow in the GetNICInfo function of the CTagInfoThreadBase class. This can be exploited by a remote attacker to cause a denial of service. The...

Advantech WebAccess HMI Designer MCR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

CVE-2019-10961: Out-of-bounds Write

In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, allowing remote code execution...

Advantech WebAccess HMI Designer Detection (Windows SMB Login)

Detects the installed version of Advantech WebAccess HMI Designer. The script logs in via smb, searches for SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

(0Day) Advantech WebAccess HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-8835: Double Free

Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

CVE-2018-8833: Heap-based Buffer Overflow

Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

CVE-2018-8837: Out-of-bounds Write

Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buffer area and may allow remote code execution...

PT-2018-1175

Name of the Vulnerable Software and Affected Versions Advantech WebAccess HMI Designer versions 2.1.7.32 and prior Description The issue is caused by a heap-based buffer overflow in Advantech WebAccess HMI Designer when processing specially crafted .pm3 files. This may allow a remote attacker to...

PT-2018-1176

Name of the Vulnerable Software and Affected Versions Advantech WebAccess HMI Designer version 2.1.7.32 and prior Description The issue is caused by double free vulnerabilities when processing specially crafted .pm3 files, which may allow remote code execution. An attacker could exploit this issu...

PT-2018-1177

Name of the Vulnerable Software and Affected Versions Advantech WebAccess HMI Designer version 2.1.7.32 and prior Description The issue is caused by writing data outside the intended buffer area in memory when processing specially crafted .pm3 files. This may allow remote code execution. The...

(0Day) Advantech WebAccess HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

(0Day) Advantech WebAccess HMI Designer PM3 File Parsing Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

(0Day) Advantech WebAccess HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

(0Day) Advantech WebAccess HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...