What is CVE-2018-8837?

CVE-2018-8837 is a high-severity vulnerability in Advantech Webaccess Hmi Designer, classified under Out-of-bounds Write. CVSS score: 7.8/10. Published 2018-04-25.

How severe is CVE-2018-8837?

High severity. CVSS v3 base score is 7.8 out of 10.

Buffer overflow in Advantech Webaccess Hmi Designer

CVE-2018-8837

Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buffer area and may allow remote code execution.

Vulnerability class: Buffer Overflow

EPSS: 0.021 (79.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Advantech Webaccess_hmi_designer
Ics-cert Advantech Webaccess Hmi Designer — versions Advantech WebAccess HMI Designer, Version 2.1.7.32 and prior.

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

ics-cert@hq.dhs.gov (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-8837?: CVE-2018-8837 is a high-severity vulnerability in Advantech Webaccess Hmi Designer, classified under Out-of-bounds Write. CVSS score: 7.8/10. Published 2018-04-25.
How severe is CVE-2018-8837?: High severity. CVSS v3 base score is 7.8 out of 10.