PT-2020-12261
CVE-2020-10637
·
Published
2020-04-15
·
Updated
2020-04-22
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Eaton HMiSoft VU3 versions 3.00.23 and prior
Description
The issue is related to an out-of-bounds read that can occur when a specially crafted input file is loaded by the affected product. This can lead to information disclosure. The HMIVU runtimes are not impacted by this issue.
Recommendations
For Eaton HMiSoft VU3 versions 3.00.23 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾