CVE-2020-16215

State: Published
Severity: Not scored
Published: Aug 6, 2020
Updated: Aug 4, 2024
Reserved: Jul 31, 2020

Description

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause a stack-based buffer overflow, which may allow remote code execution, disclosure/modification of information, or cause the application to crash.

Scores

The record has no CVSS score.

Weaknesses

CWE-121 STACK-BASED BUFFER OVERFLOW CWE-121

Affected Products

Product	Versions
Advantech WebAccess HMI Designern/a	Versions 2.1.9.31 and priorAffected

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-219-02
https://www.zerodayinitiative.com/advisories/ZDI-20-953/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.