Approved changes feed: RSS · Atom

cpe:2.3:a:advantech:webaccess\/hmi_designer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdvantech (fedf766b-bee1-5692-bcc7-1aa8d9dc594c)
ProductWebaccess/Hmi Designer (3d661ebd-e3ab-5965-90f4-ce7bc153d8fd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-33004 vulnerable 2026-06-08 05:32:08.452963 Details available
The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow an attacker to execute arbitrary code. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).
Published: 2021-06-24T17:34:07.000Z
Updated: 2024-08-03T23:42:19.880Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33002 vulnerable 2026-06-08 05:32:08.452135 Details available
Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code. User interaction is require on the WebAccess HMI Designer (versions 2.1.9.95 and prior).
Published: 2021-06-24T17:38:19.000Z
Updated: 2024-08-03T23:42:19.122Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33000 vulnerable 2026-06-08 05:32:08.448935 Details available
Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).
Published: 2021-06-24T17:30:20.000Z
Updated: 2024-08-03T23:42:19.123Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16229 vulnerable 2026-06-08 05:19:27.757752 Details available
Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause a type confusion condition, which may allow remote code execution, disclosure/modification of information, or cause the application to crash.
Published: 2020-08-06T18:24:10.000Z
Updated: 2024-08-04T13:37:54.174Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16217 vulnerable 2026-06-08 05:19:27.582026 Details available
Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project files may allow remote code execution, disclosure/modification of information, or cause the application to crash.
Published: 2020-08-06T18:15:51.000Z
Updated: 2024-08-04T13:37:53.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16215 vulnerable 2026-06-08 05:19:27.559589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16213 vulnerable 2026-06-08 05:19:27.558679 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16211 vulnerable 2026-06-08 05:19:27.554377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16207 vulnerable 2026-06-08 05:19:27.547457 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.