CVE-2018-14810 Vulnerability Details

  /     /     /  

CVE-2018-14810 Metadata Quick Info

CVE Published: 08/10/2018 | CVE Updated: 16/09/2024 | CVE Year: 2018
Source: icscert | Vendor: WECON | Product: PI Studio HMI
Status : PUBLISHED

---

CVE-2018-14810 Description

WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsafe method call, which may allow code to be executed in the context of an administrator.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-787
CWE Name: OUT-OF-BOUNDS WRITE CWE-787
Source: WECON

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).