Description
Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WebAccess HMI Designer | versions 2.1.9.95 and prior | — |
Advisories 1
- ICSA-21-173-01 Advantech WebAccess HMI Designer (Update A) CISA ICS & IT advisories · Nov 9, 2021