HTTP: Eaton HMiSoft VU3 Stack Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Eaton HMiSoft. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the user.

Extended Description

Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product.

References

CVE: CVE-2020-10639

URL: http://www.zerodayinitiative.com/advisories/ZDI-20-481/

Short Name

HTTP:STC:IMG:EATON-HS-BOF

Severity

Minor

Recommended

True

Recommended Action

Drop

HTTP: Eaton HMiSoft VU3 Stack Buffer Overflow

Extended Description

References

Found a potential security threat?