Eaton Hmisoft Vu3 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Eaton Hmisoft Vu3, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5MediumCVE-2020-10637eaton · hmisoft_vu3_firmwareeaton hmisoft_vu3_firmwareEaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product.EPSS0.83%7.8HighCVE-2020-10639eaton · hmisoft_vu3_firmwareeaton hmisoft_vu3_firmwareEaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product.EPSS0.80%