high7.8
CVE-2021-33000
Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution.
Impact
Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advantech | Webaccess\/Hmi Designer | through 2.1.9.95 |