CVE-2018-14818 WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior have a stack-based buffer overflow vulnerability which may allow remote code execution.
CriticalCVSS 9.8
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior have a stack-based buffer overflow vulnerability which may allow remote code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| we-con pi studio | <= 4.2.34 | No fix listed |
| we-con pi studio hmi | <= 4.1.9 | No fix listed |
| wecon PI Studio HMI | = 4.1.9 and prior | No fix listed |
| wecon PI Studio | = 4.2.34 and prior | No fix listed |
References
- ics-cert.us-cert.gov third-party-advisory us-government-resource