CVE-2020-10637

EPSS 0.8%CWE-125

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

15 Apr 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product.

Affected products

n/a · Eaton HMiSoft VU3 (HMIVU3 runtime not impacted)

References

https://www.us-cert.gov/ics/advisories/icsa-20-105-01