CVE-2020-16217

State: Published
Severity: Not scored
Published: Aug 6, 2020
Updated: Aug 4, 2024
Reserved: Jul 31, 2020

Description

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project files may allow remote code execution, disclosure/modification of information, or cause the application to crash.

Scores

The record has no CVSS score.

Weaknesses

CWE-415 DOUBLE FREE CWE-415

Affected Products

Product	Versions
Advantech WebAccess HMI Designern/a	Versions 2.1.9.31 and priorAffected

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-219-02
https://www.zerodayinitiative.com/advisories/ZDI-20-952/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.