EUVD-2020-8183

Malware in sbrugna...

EUVD-2020-8177

Malware in sbrugna...

EUVD-2018-20441

Malware in sbrugna...

CVE-2020-16213

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, which may allow remote code execution, disclosure/modification of information, ...

Advantech WebAccess HMI Designer Resource Management Error Vulnerability

Advantech WebAccess HMI Designer is an integrated HMI development tool from Advantech, Taiwan, China. The product is equipped with features such as data transfer, menu editing and text editing. A resource management error vulnerability exists in Advantech WebAccess HMI Designer versions prior to...

PT-2021-20013

Name of the Vulnerable Software and Affected Versions Advantech WebAccess HMI Designer versions 2.1.9.95 and prior Description The issue is related to parsing maliciously crafted project files, which can lead to a heap-based buffer overflow. This may allow an attacker to execute arbitrary code, b...

(0Day) Advantech WebAccess/HMI Designer PLF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

PT-2021-20016

Name of the Vulnerable Software and Affected Versions Advantech WebAccess HMI Designer versions 2.1.9.95 and prior Description The issue is related to a memory corruption condition due to the lack of proper validation of user-supplied files. This may allow an attacker to execute arbitrary code, b...

Integer Overflow Vulnerability in Advantech WebAccess HMI Runtime (CNVD-2020-61109)

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. An integer overflow vulnerability exists in Advantech WebAccess HMI Runtime, which can be exploited by an attacker to cause a denial of service on the server. The vulnerability can be exploited by an...

Advantech WebAccess/HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

CVE-2020-16207

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by opening specially crafted project files that may overflow the heap, which may allow remote code execution, disclosure/modification of information, or cause the...

CVE-2020-16217

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project files may allow remote code execution, disclosure/modification of information, or cause the application to crash...

PT-2020-14814

Name of the Vulnerable Software and Affected Versions Advantech WebAccess HMI Designer versions 2.1.9.31 and prior Description The issue arises from processing specially crafted project files that lack proper validation of user-supplied data, leading to a stack-based buffer overflow. This may...

CVE-2020-16207: Heap-based Buffer Overflow

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by opening specially crafted project files that may overflow the heap, which may allow remote code execution, disclosure/modification of information, or cause the...

PT-2020-14816 · Advantech · Advantech Webaccess Hmi Designer

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess HMI Designer versions 2.1.9.31 and prior Description: A double free vulnerability exists due to the processing of specially crafted project files, which may allow remote code execution, disclosure or modification of...

PT-2020-14810 · Advantech · Advantech Webaccess Hmi Designer

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess HMI Designer versions 2.1.9.31 and prior Description: An out-of-bounds read issue may be exploited by processing specially crafted project files, allowing an attacker to read information. Recommendations: For Advantech...

CVE-2020-16215: Stack-based Buffer Overflow

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause a stack-based buffer overflow, which may allow remote code execution, disclosure/modification of information, or cause the applicatio...

CVE-2020-16229: Access of Resource Using Incompatible Type

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause a type confusion condition, which may allow remote code execution, disclosure/modification of information, or cause the application t...

PT-2020-14828 · Advantech · Advantech Webaccess Hmi Designer

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess HMI Designer versions 2.1.9.31 and prior Description: The issue arises from the processing of specially crafted project files that lack proper validation of user-supplied data, potentially leading to a type confusion...

CVE-2020-16217: Double Free

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project files may allow remote code execution, disclosure/modification of information, or cause the application to crash...