CVE-2018-14818

WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior have a stack-based buffer overflow vulnerability which may allow remote code execution.

Score

CVSS 3.1 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-10-08

Last modified

2024-09-17

Weaknesses

CWE-121, CWE-787

Affected products

• Pi Studio (We-con)
• Pi Studio Hmi (We-con)
• Pi Studio (Wecon)
• Pi Studio Hmi (Wecon)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01