CVE-2018-8837: vulnerability in ICS-CERT Advantech WebAccess HMI Designer
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 2.0%
Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buffer area and may allow remote code execution.
Affected products
ICS-CERT · Advantech WebAccess HMI DesignerRelated CVEs — ICS-CERT Advantech WebAccess HMI Designer
In the same product, most dangerous first.