CVE-2020-10637
First published: Wed Apr 15 2020(Updated: )
Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Eaton Hmisoft Vu3 Firmware | <=3.00.23 | |
| Eaton HMiSoft VU3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Eaton HMiSoft issue?
The vulnerability ID for this Eaton HMiSoft issue is CVE-2020-10637.
What is the severity level of CVE-2020-10637?
CVE-2020-10637 has a severity level of medium.
Which version of Eaton HMiSoft VU3 firmware is affected?
Eaton HMiSoft VU3 firmware version 3.00.23 and prior are affected.
Are HMIVU runtimes impacted by CVE-2020-10637?
No, the HMIVU runtimes are not impacted by CVE-2020-10637.
What can trigger the out-of-bounds read in the affected product?
A specially crafted input file could trigger the out-of-bounds read in the affected product.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- vendor/eaton
- canonical/eaton hmisoft vu3 firmware
- version/eaton hmisoft vu3 firmware/3.00.23
- canonical/eaton hmisoft vu3