CVEvulnerability
CVE-2018-14810
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-10-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-787
Description
WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsafe method call, which may allow code to be executed in the context of an administrator.
Affected configurations
• we-con pi studio (<= 4.2.34)
• we-con pi studio hmi (<= 4.1.9)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01 Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01 Third Party Advisory, US Government Resource