PT-2018-1637 · Wecon Technology · Pi Studio Hmi+1
Publicado
2018-10-02
·
Atualizado
2019-10-09
·
CVE-2018-14814
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
WECON Technology PI Studio HMI versions 4.1.9 and prior
PI Studio versions 4.2.34 and prior
Description
The issue is caused by a lack of proper validation of user-supplied data, which may result in a read past the end of an allocated object. This can potentially allow a remote attacker to access protected information.
Recommendations
For WECON Technology PI Studio HMI versions 4.1.9 and prior, update to a version later than 4.1.9 to resolve the issue.
For PI Studio versions 4.2.34 and prior, update to a version later than 4.2.34 to resolve the issue.
As a temporary workaround, consider restricting access to user-supplied data to minimize the risk of exploitation.
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Pi Studio
Pi Studio Hmi