CVE-2020-10639

Name of the Vulnerable Software and Affected Versions Eaton HMiSoft VU3 versions 3.00.23 and prior

Description A specially crafted input file could cause a buffer overflow when loaded by the affected product. The issue is related to file parsing and can lead to remote code execution.

Recommendations For Eaton HMiSoft VU3 versions 3.00.23 and prior, update to a version later than 3.00.23 to resolve the issue. As a temporary workaround, consider restricting the loading of specially crafted input files to minimize the risk of exploitation.