Details of VAR-202105-1566

ID

VAR-202105-1566

TITLE

WebAccess/HMI Designer has memory out-of-bounds access vulnerability

Trust: 0.6

sources: CNVD: CNVD-2021-24694

DESCRIPTION

WebAccess/HMI Designer is a man-machine interface integrated development tool. WebAccess/HMI Designer has an out-of-bounds memory access vulnerability, which can be exploited by attackers to cause denial of service.

Trust: 0.6

sources: CNVD: CNVD-2021-24694

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2021-24694

AFFECTED PRODUCTS

vendor:

advantech

model:

webaccess/hmi designer

scope:

version:

2.1

Trust: 0.6

sources: CNVD: CNVD-2021-24694

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2021-24694
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2021-24694
severity:	MEDIUM
baseScore:	4.9
vectorString:	AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2021-24694

EXTERNAL IDS

db:

CNVD

id:

CNVD-2021-24694

Trust: 0.6

sources: CNVD: CNVD-2021-24694

SOURCES

db:

CNVD

id:

CNVD-2021-24694

LAST UPDATE DATE

2022-05-04T10:07:09.101000+00:00

SOURCES UPDATE DATE

db:

CNVD

id:

CNVD-2021-24694

date:

2021-04-02T00:00:00

SOURCES RELEASE DATE

db:

CNVD

id:

CNVD-2021-24694

date:

2021-05-07T00:00:00