CVE-2020-16213

Name of the Vulnerable Software and Affected Versions Advantech WebAccess HMI Designer versions 2.1.9.31 and prior

Description The issue arises from the processing of specially crafted project files that lack proper validation of user-supplied data. This can cause the system to write outside the intended buffer area, potentially allowing remote code execution, disclosure or modification of information, or causing the application to crash.

Recommendations For Advantech WebAccess HMI Designer versions 2.1.9.31 and prior, consider implementing proper validation of user-supplied data in project files to prevent out-of-bounds write conditions until a patch is available. As a temporary workaround, restrict the processing of project files from untrusted sources to minimize the risk of exploitation.