high7.8
CVE-2020-10639
Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues.
Impact
Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eaton | Hmisoft Vu3 Firmware | through 3.00.23 |