Sign-up

ID

VAR-201804-1754


TITLE

(0Day) Advantech WebAccess HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Trust: 0.7

sources: ZDI: ZDI-18-363

DESCRIPTION

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the processing of a PM3 file. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code under the context of the current process.

Trust: 0.7

sources: ZDI: ZDI-18-363

AFFECTED PRODUCTS

vendor:advantechmodel:webaccess hmi designerscope: - version: -

Trust: 0.7

sources: ZDI: ZDI-18-363

CVSS

SEVERITY

CVSSV2

CVSSV3

ZDI: ZDI-18-363
value: MEDIUM

Trust: 0.7

ZDI: ZDI-18-363
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.7

sources: ZDI: ZDI-18-363

EXTERNAL IDS

db:ZDI_CANid:ZDI-CAN-5248

Trust: 0.7

db:ZDIid:ZDI-18-363

Trust: 0.7

sources: ZDI: ZDI-18-363

CREDITS

Steven Seeley (mr_me) of Source Incite

Trust: 0.7

sources: ZDI: ZDI-18-363

SOURCES

db:ZDIid:ZDI-18-363

LAST UPDATE DATE

2022-05-17T01:59:56.430000+00:00


SOURCES UPDATE DATE

db:ZDIid:ZDI-18-363date:2018-04-20T00:00:00

SOURCES RELEASE DATE

db:ZDIid:ZDI-18-363date:2018-04-20T00:00:00