CVE-2020-10637

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product...

EUVD-2020-3085

Malware in sbrugna...

CVE-2020-10639

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product...

CVE-2020-10637

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product...

Buffer overflow

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product...

CVE-2020-10639

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product...

CVE-2020-10637

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product...

CVE-2020-10637

CVE-2020-10637 affects Eaton HMiSoft HMI VU3. Versions up to 3.00.23 are implicated; HMIVU3 runtimes are not impacted. The vulnerability involves out-of-bounds reads during parsing of VU3 files (examples include Base64TextLen, Giffile, wTextLen, etc.), leading to potential information disclosure....

PT-2020-12263

Name of the Vulnerable Software and Affected Versions Eaton HMiSoft VU3 versions 3.00.23 and prior Description A specially crafted input file could cause a buffer overflow when loaded by the affected product. The issue is related to file parsing and can lead to remote code execution...

CVE-2020-10637: Out-of-bounds Read

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product...

Eaton HMiSoft VU3 Buffer Overflow Vulnerability (CNVD-2020-27479)

Eaton HMiSoft VU3 is a set of HMI programming software from Eaton Corporation. A buffer overflow vulnerability exists in Eaton HMiSoft VU3. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an...

CVE-2020-10639: Stack-based Buffer Overflow

Eaton HMiSoft VU3 HMIVU3 runtime not impacted, Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product...

PT-2020-12261

Name of the Vulnerable Software and Affected Versions Eaton HMiSoft VU3 versions 3.00.23 and prior Description The issue is related to an out-of-bounds read that can occur when a specially crafted input file is loaded by the affected product. This can lead to information disclosure. The HMIVU...

Eaton HMiSoft VU3

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Eaton Equipment: HMiSoft VU3 HMIVU3 runtime not impacted Vulnerabilities: Stack-based Buffer Overflow, Out-of-bounds Read 2. RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device being...