Medium ICSA-18-114-03 3 CVEs

Advantech WebAccess HMI Designer

Published Apr 24, 2018 · Updated Apr 24, 2018

Vendor: Advantech Product: WebAccess HMI Designer

Summary

Successful exploitation of these vulnerabilities may allow an attacker to remotely execute arbitrary code.

Vulnerabilities 3

Unscored —

CVE-2018-8833

Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing …

ICS-CERT Advantech WebAccess HMI Designer

Apr 25, 2018
Unscored —

CVE-2018-8835

Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially craft…

ICS-CERT Advantech WebAccess HMI Designer

Apr 25, 2018
Unscored —

CVE-2018-8837

Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to …

ICS-CERT Advantech WebAccess HMI Designer

Apr 25, 2018

Revision history

2018-04-24 #1
ICSA-18-114-03 Advantech WebAccess HMI Designer

References

ICS Advisory ICSA-18-114-03 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-114-03
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-18-114-03
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf