CVE-2019-10961CWE-787

In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper validation of user supplied data may…

published August 2, 2019

CVSS
—
EPSS
4%
Percentile
90.8
In the wild
Unconfirmed
What it is

In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, allowing remote code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04127 · 90.8th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2019-08-02T16:06Z
EPSS history
Timeline
  • 02 AUG 16:06Z
    In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper validation of user supplied data may…
    cvelistv5