CVE-2018-14810

HIGH

WECON PI Studio and PI Studio HMI - Out-of-bounds Write via Unsafe Method Call

Title source: llm
STIX 2.1

Description

WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsafe method call, which may allow code to be executed in the context of an administrator.

References (1)

Core 1
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01

Scores

CVSS v3 8.8
EPSS 0.0170
EPSS Percentile 74.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (2)
we-con/pi_studio < 4.2.34
we-con/pi_studio_hmi < 4.1.9
Published Oct 08, 2018
Tracked Since Feb 18, 2026