Vulnerabilities > CVE-2020-16229 - Type Confusion vulnerability in Advantech Webaccess/Hmi Designer 2.1/2.1.9.31
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause a type confusion condition, which may allow remote code execution, disclosure/modification of information, or cause the application to crash.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |