Main Vulnerability Database Vulnerabilities #VU36629

Buffer overflow in PLC Editor - CVE-2018-14792

Published: September 19, 2018 / Updated: August 8, 2020

Vulnerability identifier: #VU36629

CSH Severity: Medium

CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2018-14792

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: WECON Technology Co., Ltd.

Affected software:
PLC Editor

Detailed vulnerability description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files.

Install update from vendor's website.