1. Home
  2. CVE Database
  3. CVE-2018-14810
HIGH · 8.8

CVE-2018-14810

WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsafe method call, which may allow code to b...

Vulnerability Description

WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsafe method call, which may allow code to be executed in the context of an administrator.

CVSS Score

8.8

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
We-ConPi Studio<= 4.2.34
We-ConPi Studio Hmi<= 4.1.9

Related Weaknesses (CWE)

CWE-787

References

FAQ

What is CVE-2018-14810?

CVE-2018-14810 is a vulnerability with a CVSS score of 8.8 (HIGH). WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsafe method call, which may allow code to b...

How severe is CVE-2018-14810?

CVE-2018-14810 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-14810?

Check the references section above for vendor advisories and patch information. Affected products include: We-Con Pi Studio, We-Con Pi Studio Hmi.