High ICSA-18-277-01 4 CVEs

WECON PI Studio (Update A)

Published Oct 4, 2018 · Updated Nov 2, 2021 · Revision 2

Vendor: WECON Product: PI Studio Product: PI Studio HMI

Summary

Successful exploitation of these vulnerabilities may allow execution of code and disclose sensitive information under the context of administrator.

Vulnerabilities 4

Unscored —

CVE-2018-14810

WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files a…

WECON PI Studio HMI PI Studio

Oct 8, 2018
Unscored —

CVE-2018-14814

WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation…

WECON WECON Technology PI Studio HMI

Mar 27, 2019
Unscored —

CVE-2018-14818

WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior have a stack-…

WECON PI Studio PI Studio HMI

Oct 8, 2018
Unscored —

CVE-2018-17889

In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior when parsi…

WECON PI Studio HMI PI Studio

Oct 8, 2018

Revision history

2021-11-02 #2
ICSA-18-277-01 WECON PI Studio (Update A)
2018-10-04 #1
ICSA-18-277-01 WECON PI Studio

References

ICS Advisory ICSA-18-277-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-277-01
Recommended Practices
https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B