VULNERABILITY INTELLIGENCE

CVE-2018-14810

CVSS score8.8 HIGH
EPSS probability1.70%
CISA KEVNot currently listed
Published2018-10-08
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsafe method call, which may allow code to be executed in the context of an administrator.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references