PT-2020-14812 · Advantech · Advantech Webaccess Hmi Designer

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess HMI Designer versions 2.1.9.31 and prior Description: The issue arises from the processing of specially crafted project files that lack proper validation of user-supplied data. This can cause the system to write outside th...

PT-2020-14816 · Advantech · Advantech Webaccess Hmi Designer

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess HMI Designer versions 2.1.9.31 and prior Description: A double free vulnerability exists due to the processing of specially crafted project files, which may allow remote code execution, disclosure or modification of...

PT-2020-14810 · Advantech · Advantech Webaccess Hmi Designer

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess HMI Designer versions 2.1.9.31 and prior Description: An out-of-bounds read issue may be exploited by processing specially crafted project files, allowing an attacker to read information. Recommendations: For Advantech...

CVE-2020-16215: Stack-based Buffer Overflow

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause a stack-based buffer overflow, which may allow remote code execution, disclosure/modification of information, or cause the applicatio...

CVE-2020-16229: Access of Resource Using Incompatible Type

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause a type confusion condition, which may allow remote code execution, disclosure/modification of information, or cause the application t...

PT-2020-14828 · Advantech · Advantech Webaccess Hmi Designer

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess HMI Designer versions 2.1.9.31 and prior Description: The issue arises from the processing of specially crafted project files that lack proper validation of user-supplied data, potentially leading to a type confusion...

CVE-2020-16217: Double Free

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project files may allow remote code execution, disclosure/modification of information, or cause the application to crash...

CVE-2020-16211: Out-of-bounds Read

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. An out-of-bounds read vulnerability may be exploited by processing specially crafted project files, which may allow an attacker to read information...

CVE-2020-16207: Heap-based Buffer Overflow

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by opening specially crafted project files that may overflow the heap, which may allow remote code execution, disclosure/modification of information, or cause the...

CVE-2020-16213: Out-of-bounds Write

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, which may allow remote code execution, disclosure/modification of information, ...

Advantech WebAccess/SCADA has a Logic Flaw Vulnerability

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. A logic flaw vulnerability exists in Advantech WebAccess/SCADA. The vulnerability can be exploited to gain access to modify the registry of a user's system and execute arbitrary commands on the user's system...

Advantech WebAccess/SCADA suffers from a command execution vulnerability (CNVD-2020-48619)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. A command execution vulnerability exists in Advantech WebAccess/SCADA. An attacker could exploit the vulnerability to execute console commands...

Advantech WebAccess/SCADA suffers from a command execution vulnerability (CNVD-2020-48616)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. A command execution vulnerability exists in Advantech WebAccess/SCADA. An attacker could exploit the vulnerability to execute console commands...

Advantech WebAccess/SCADA suffers from an arbitrary file deletion vulnerability (CNVD-2020-48624)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA. An attacker can exploit the vulnerability to delete arbitrary files...

Advantech WebAccess/SCADA suffers from a command execution vulnerability (CNVD-2020-48618)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. A command execution vulnerability exists in Advantech WebAccess/SCADA. An attacker could exploit the vulnerability to execute console commands...

Information Disclosure Vulnerability in Advantech WebAccess/SCADA

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An information disclosure vulnerability exists in Advantech WebAccess/SCADA. The vulnerability can be exploited to obtain sensitive information such as remote connection passwords, backend administrator...

Advantech WebAccess/SCADA suffers from a logic flaw vulnerability (CNVD-2020-48617)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. A logic flaw vulnerability exists in Advantech WebAccess/SCADA. The vulnerability can be exploited to gain access to modify the registry of a user's system and execute arbitrary commands on the user's system...

Denial of Service Vulnerability in Advantech WebAccess Node

Advantech WebAccess Node is a fully Internet Explorer based HMI/SCADA monitoring software. A heap overflow vulnerability exists in Advantech WebAccess Node that could lead to a denial of service...

Advantech (China) Co., Ltd. WebAccess Node suffers from Denial of Service Vulnerability (CNVD-2020-45127)

WebAccess Node is a fully Internet Explorer-based HMI/SCADA monitoring software from Advantech China Co. A denial of service vulnerability exists in Advantech China WebAccess Node, which can be exploited by attackers to cause a denial of service...

Arbitrary File Deletion Vulnerability in WebAccess SCADA at Advantech (China) Co.

Advantech WebAccess SCADA is a browser-based SCADA software package for supervisory control, data acquisition and visualization. It is used to automate complex industrial processes in the context of remote operation. An arbitrary file deletion vulnerability exists in Advantech China WebAccess...