Description
Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code. User interaction is require on the WebAccess HMI Designer (versions 2.1.9.95 and prior).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WebAccess HMI Designer | versions 2.1.9.95 and prior | — |
Advisories 1
- ICSA-21-173-01 Advantech WebAccess HMI Designer (Update A) CISA ICS & IT advisories · Nov 9, 2021