CVE-2020-16213 Vulnerability Details

  /     /     /  

CVE-2020-16213 Metadata Quick Info

CVE Published: 06/08/2020 | CVE Updated: 04/08/2024 | CVE Year: 2020
Source: icscert | Vendor: n/a | Product: Advantech WebAccess HMI Designer
Status : PUBLISHED

---

CVE-2020-16213 Description

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, which may allow remote code execution, disclosure/modification of information, or cause the application to crash.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-787
CWE Name: OUT-OF-BOUNDS WRITE CWE-787
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).