CVE-2021-33000CWE-122

Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution

published June 24, 2021

CVSS
—
EPSS
1%
Percentile
63.7
In the wild
Unconfirmed
What it is

Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01041 · 63.7th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2021-06-24T17:30Z
EPSS history
Timeline
  • 24 JUN 17:30Z
    Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution
    cvelistv5