CVE-2020-16207: falha em Advantech WebAccess HMI Designer
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.7%
Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by opening specially crafted project files that may overflow the heap, which may allow remote code execution, disclosure/modification of information, or cause the application to crash.
Produtos afetados
n/a · Advantech WebAccess HMI DesignerReferências
https://us-cert.cisa.gov/ics/advisories/icsa-20-219-02https://www.zerodayinitiative.com/advisories/ZDI-20-950/https://www.zerodayinitiative.com/advisories/ZDI-20-951/https://www.zerodayinitiative.com/advisories/ZDI-20-955/https://www.zerodayinitiative.com/advisories/ZDI-20-958/https://www.zerodayinitiative.com/advisories/ZDI-20-959/