CVE-2018-14818 Memory corruption in PI Studio
A stack-based buffer overflow in WECON PI Studio allows remote attackers to execute arbitrary code on affected HMI systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-14818?
CVE-2018-14818 is a critical memory corruption vulnerability in WECON PI Studio, published on 8 Oct 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior have a stack-based buffer overflow vulnerability which may allow remote code execution.
Which versions are affected by CVE-2018-14818?
It affects 2 products.
Products include We-Con Pi Studio, We-Con Pi Studio Hmi.
How do I fix CVE-2018-14818?
No fix has been published for CVE-2018-14818 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2018-14818 being exploited?
There is no known exploitation of CVE-2018-14818 in the wild and no public exploit code.
Other vulnerabilities in WECON PI Studio
Sources
Also known as GHSA-mq6h-9xw9-9gqm.