CVE-2020-10637: Medium severity eaton hmisoft vu3 vulnerability
Published Apr 15, 2020
·Updated
Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product.
Affected Software
2 affected components
Eaton Hmisoft Vu3 Firmware<=3.00.23
Eaton HMiSoft VU3
Event History
Apr 15, 2020
CVE Published
via MITRE·04:44 PM
Data Sourced
via MITRE·04:44 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Eaton HMiSoft issue?
The vulnerability ID for this Eaton HMiSoft issue is CVE-2020-10637.
2
What is the severity level of CVE-2020-10637?
CVE-2020-10637 has a severity level of medium.
3
Which version of Eaton HMiSoft VU3 firmware is affected?
Eaton HMiSoft VU3 firmware version 3.00.23 and prior are affected.
4
Are HMIVU runtimes impacted by CVE-2020-10637?
No, the HMIVU runtimes are not impacted by CVE-2020-10637.
5
What can trigger the out-of-bounds read in the affected product?
A specially crafted input file could trigger the out-of-bounds read in the affected product.