CVE-2020-10639: Buffer Overflow
Published Apr 15, 2020
·Updated
Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product.
Affected Software
2 affected components
Eaton Hmisoft Vu3 Firmware<=3.00.23
Eaton HMiSoft VU3
Event History
Apr 15, 2020
CVE Published
via MITRE·04:48 PM
Data Sourced
via MITRE·04:48 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Eaton HMiSoft VU3 vulnerability?
The vulnerability ID for this Eaton HMiSoft VU3 vulnerability is CVE-2020-10639.
2
What is the severity level of CVE-2020-10639?
The severity level of CVE-2020-10639 is high with a CVSS score of 7.8.
3
Which versions of Eaton HMiSoft VU3 firmware are affected by CVE-2020-10639?
Eaton HMiSoft VU3 firmware versions up to 3.00.23 are affected by CVE-2020-10639.
4
Are the HMIVU runtimes affected by CVE-2020-10639?
No, the HMIVU runtimes are not impacted by CVE-2020-10639.
5
How can a buffer overflow be triggered in the affected product?
A specially crafted input file can trigger a buffer overflow in the affected product.