Main Vulnerability Database Vulnerabilities #VU36629

Buffer overflow in PLC Editor - CVE-2018-14792

Published: September 19, 2018 / Updated: August 8, 2020

Vulnerability identifier: #VU36629

CSH Severity: Medium

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-14792

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files.

PLC Editor

Install update from vendor's website.