CVE-2020-16207
Advantech WebAccess/HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by opening specially crafted project files that may overflow the heap, which may allow remote code execution, disclosure/modification of information, or cause the application to crash.
Advantech WebAccess HMI Designer, versiones 2.1.9.31 y anteriores. Múltiples vulnerabilidades de desbordamiento del búfer en la región heap de la memoria pueden ser explotadas al abrir archivos de proyecto especialmente diseñados que pueden desbordar la pila, lo que puede permitir una ejecución de código remota, divulgación y modificación de información o causar que la aplicación se bloquee
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of PM3 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2020-07-31 CVE Reserved
- 2020-08-06 CVE Published
- 2024-08-04 CVE Updated
- 2024-10-01 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-122: Heap-based Buffer Overflow
- CWE-787: Out-of-bounds Write
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| https://us-cert.cisa.gov/ics/advisories/icsa-20-219-02 | Third Party Advisory | |
| https://www.zerodayinitiative.com/advisories/ZDI-20-950 | Third Party Advisory |
|
| https://www.zerodayinitiative.com/advisories/ZDI-20-951 | Third Party Advisory |
|
| https://www.zerodayinitiative.com/advisories/ZDI-20-955 | Third Party Advisory |
|
| https://www.zerodayinitiative.com/advisories/ZDI-20-958 | Third Party Advisory |
|
| https://www.zerodayinitiative.com/advisories/ZDI-20-959 | Third Party Advisory |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Advantech Search vendor "Advantech" | Webaccess\/hmi Designer Search vendor "Advantech" for product "Webaccess\/hmi Designer" | <= 2.1.9.31 Search vendor "Advantech" for product "Webaccess\/hmi Designer" and version " <= 2.1.9.31" | - |
Affected
| ||||||