PT-2018-1634
CVE-2018-14818
·
تاريخ النشر
2018-10-02
·
تاريخ التحديث
2020-08-28
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior
WECON Technology Co., Ltd. PI Studio versions 4.2.34 and prior
Description
The issue is caused by a stack-based buffer overflow in PI Studio, which may allow a remote attacker to execute arbitrary code.
Recommendations
For WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior, update to a version later than 4.1.9 to resolve the issue.
For WECON Technology Co., Ltd. PI Studio versions 4.2.34 and prior, update to a version later than 4.2.34 to resolve the issue.
As a temporary workaround, consider restricting access to the PI Studio to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾