Detections
Analytics

CVE-2019-10961

high

Description

In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, allowing remote code execution.

References

https://www.zerodayinitiative.com/advisories/ZDI-19-691/

https://www.us-cert.gov/ics/advisories/icsa-19-213-01

Details

Source: Mitre, NVD

Published: 2019-08-02

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00817