CVE-2018-8837

CVE-2018-8837 affects Advantech WebAccess HMI Designer (versions 2.1.7.32 and earlier). The root cause is an out-of-bounds write (CWE-787) triggered by processing specially crafted .pm3 files, potentially leading to remote code execution. Public sources in the connected documents corroborate the ...

CVE-2018-8837

Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buffer area and may allow remote code execution...