CVE-2020-10637

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product...

EUVD-2020-3085

Malware in sbrugna...

EUVD-2020-3087

Malware in sbrugna...

CVE-2020-10639

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product...

Eaton HMiSoft Stack Buffer Overflow (CVE-2020-10639)

A stack buffer overflow vulnerability exists in Eaton HMiSoft. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

CVE-2020-10639

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product...

CVE-2020-10637

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product...

CVE-2020-10639

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product...

CVE-2020-10637

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product...

Out-of-bounds

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product...

Buffer overflow

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product...

CVE-2020-10639

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product...

CVE-2020-10639

CVE-2020-10639 affects Eaton HMiSoft VU3; a buffer overflow in parsing various VU3 file fields (eTextLen, wKPFString, LinkSize) causes stack-based overflow. Public sources (ZDI advisories) describe remote code execution with user interaction; exploitation targets VU3 file parsing, potentially imp...

CVE-2020-10637

CVE-2020-10637 affects Eaton HMiSoft HMI VU3. Versions up to 3.00.23 are implicated; HMIVU3 runtimes are not impacted. The vulnerability involves out-of-bounds reads during parsing of VU3 files (examples include Base64TextLen, Giffile, wTextLen, etc.), leading to potential information disclosure....

CVE-2020-10637

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product...

Eaton HMiSoft VU3 Buffer Overflow Vulnerability

Eaton HMiSoft VU3 is a set of HMI programming software from Eaton Corporation. A buffer overflow vulnerability exists in Eaton HMiSoft VU3. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an...

Eaton HMiSoft VU3 Buffer Overflow Vulnerability (CNVD-2020-27479)

Eaton HMiSoft VU3 is a set of HMI programming software from Eaton Corporation. A buffer overflow vulnerability exists in Eaton HMiSoft VU3. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an...

CVE-2020-10639: Stack-based Buffer Overflow

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product...

CVE-2020-10637: Out-of-bounds Read

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product...

PT-2020-12263

Name of the Vulnerable Software and Affected Versions Eaton HMiSoft VU3 versions 3.00.23 and prior Description A specially crafted input file could cause a buffer overflow when loaded by the affected product. The issue is related to file parsing and can lead to remote code execution...