CVE-2018-14814

6.5 mediumEPSS 1.5%

Medium (6.5) in we-con. EPSS 1.5% chance of exploitation in the next 30 days.

WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation of user-supplied data, which may result in a read past the end of an allocated object.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2019-03-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

we-con:pi_studio
we-con:pi_studio_hmi

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01
https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01

Check your stack JSON