First published: Wed Apr 15 2020(Updated: )
Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
Eaton Hmisoft Vu3 Firmware | <=3.00.23 | |
Eaton HMiSoft VU3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this Eaton HMiSoft VU3 vulnerability is CVE-2020-10639.
The severity level of CVE-2020-10639 is high with a CVSS score of 7.8.
Eaton HMiSoft VU3 firmware versions up to 3.00.23 are affected by CVE-2020-10639.
No, the HMIVU runtimes are not impacted by CVE-2020-10639.
A specially crafted input file can trigger a buffer overflow in the affected product.