Out-of-Bounds Write Vulnerability in WebAccess HMI Designer by Advantech
CVE-2021-33002

7.8HIGH

Key Information:

Vendor
Advantech
Status
Webaccess Hmi Designer
Vendor
CVE Published:
24 June 2021

Summary

The WebAccess HMI Designer by Advantech is susceptible to an out-of-bounds write vulnerability, which can be triggered when a user opens a maliciously crafted project file. This flaw may allow an attacker to execute arbitrary code on the affected system, potentially compromising its integrity and security. User interaction is necessary for exploitation, emphasizing the importance of vigilant software usage and caution when handling project files from untrusted sources.

Affected Version(s)

WebAccess HMI Designer versions 2.1.9.95 and prior

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-173-01
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.