CVE-2021-33000

Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution. User interaction is required on the WebAccess HMI Designer versions 2.1.9.95 and prior...

Advantech WebAccess HMI Designer Buffer Overflow (CVE-2021-33000)

A buffer overflow vulnerability exists in the project management file parsing component of Advantech WebAccess HMI Designer. The vulnerability is due to lack of proper validation while processing user supplied NMultistateLamp object data...

CVE-2021-33000

CVE-2021-33000 affects Advantech WebAccess HMI Designer; parsing a malicious project file (PM3-like data) can cause a heap-based buffer overflow, enabling arbitrary code execution with user interaction required. Affected versions: WebAccess HMI Designer prior to 2.1.11.0. The Red Hat/ICS advisory...