Webaccess Hmi Designer (Advantech) - vulnerabilities (CVEs)
6 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2021-11-15. Vendor: Advantech.
CVEs of Webaccess Hmi Designer
- CVE-2021-42703 - CVSS 6.1 (medium), 2021-11-15: This vulnerability could allow an attacker to send malicious Javascript code resulting in hijacking of the user’s cookie/session tokens, redirecting the user…
- CVE-2021-42706 - CVSS 7.8 (high), 2021-11-15: This vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of WebAccess/MHI Designer
- CVE-2019-10961 - CVSS 8.8 (high), 2019-08-02: In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper validation of user supplied data may…
- CVE-2018-8835 - CVSS 7.8 (high), 2018-04-25: Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code…
- CVE-2018-8833 - CVSS 7.8 (high), 2018-04-25: Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow…
- CVE-2018-8837 - CVSS 7.8 (high), 2018-04-25: Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buffer area…
