CVE-2020-16217
HIGHAdvantech Webaccess/hmi Designer < 2.1.9.31 - Double Free
Title source: ruleDescription
Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project files may allow remote code execution, disclosure/modification of information, or cause the application to crash.
Scores
CVSS v3
7.8
EPSS
0.0062
EPSS Percentile
69.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Classification
CWE
CWE-415
Status
published
Affected Products (1)
advantech/webaccess\/hmi_designer
< 2.1.9.31
Timeline
Published
Aug 06, 2020
Tracked Since
Feb 18, 2026