8.8
CVE-2019-10961
- EPSS 0.82%
- Veröffentlicht 02.08.2019 17:15:14
- Zuletzt bearbeitet 21.11.2024 04:20:15
- Quelle ics-cert@hq.dhs.gov
- Teams Watchlist Login
- Unerledigt Login
In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, allowing remote code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Advantech ≫ Webaccess Hmi Designer Version <= 2.1.7.32
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.82% | 0.721 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.