Out-of-bounds write in PI Studio and PI Studio HMI - CVE-2018-14810
Published: October 5, 2018
Vulnerability identifier: #VU15159
CSH Severity: High
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-14810
CWE-ID: CWE-787
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to the affected product parses files and passes invalidated user data to an unsafe method call. A remote unauthenticated attacker can trick the victim into visiting a specially crafted website and execute arbitrary code with elevated privileges.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
PI Studio
PI Studio HMI
PI Studio HMI
How to mitigate CVE-2018-14810
Cybersecurity Help is currently unaware of any solutions addressing the vulnerability.