WH
Product
Webaccess Hmi Designer
18
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 16Medium 2Low 0
Watch
Add Webaccess Hmi Designer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-10961 | 8.8 | Aug 2 | In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper validation of user supplied data may cause the system to… Affected: through 2.1.7.32 |
| CVE-2021-42706 | 7.8 | Nov 15 | This vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of WebAccess/MHI Designer Affected: before 2.1.11.0 |
| CVE-2021-33004 | 7.8 | Jun 24 | The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow an attacker to execute arbitrary code Affected: through 2.1.9.95 |
| CVE-2021-33002 | 7.8 | Jun 24 | Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code Affected: through 2.1.9.95 |
| CVE-2021-33000 | 7.8 | Jun 24 | Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution Affected: through 2.1.9.95 |
| CVE-2020-16229 | 7.8 | Aug 6 | Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior Affected: through 2.1.9.31 |
| CVE-2020-16217 | 7.8 | Aug 6 | Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior Affected: through 2.1.9.31 |
| CVE-2020-16215 | 7.8 | Aug 6 | Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior Affected: through 2.1.9.31 |
| CVE-2020-16213 | 7.8 | Aug 6 | Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior Affected: through 2.1.9.31 |
| CVE-2020-16207 | 7.8 | Aug 6 | Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior Affected: through 2.1.9.31 |
| CVE-2018-8837 | 7.8 | Apr 25 | Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buffer area and may allow remote… Affected: through 2.1.7.32 |
| CVE-2018-8835 | 7.8 | Apr 25 | Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution Affected: through 2.1.7.32 |
| CVE-2018-8833 | 7.8 | Apr 25 | Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution Affected: through 2.1.7.32 |
| CVE-2019-16901 | 7.5 | Sep 26 | Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x0000000000000000 called from… Affected: 2.1.9.31 |
| CVE-2019-16900 | 7.5 | Sep 26 | Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x000000000000015c Affected: 2.1.9.31 |
| CVE-2019-16899 | 7.5 | Sep 26 | In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PM_V3!CTagInfoThreadBase::GetNICInfo+0x0000000000512918 Affected: 2.1.9.31 |
Showing 16
