CVE-2018-14814

WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation of user-supplied data, which may result in a read past the end of an allocated object.

• CWE-125
• CWE-125

• https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-18-277-01Third Party Advisory, US Government Resource

Published

Mar 27, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-14809Fuji Electric V-Server 4.0.3.0 and prior, A use after free v…
• CVE-2018-1481IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5…3.7
• CVE-2018-14810WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and …
• CVE-2018-14811Fuji Electric V-Server 4.0.3.0 and prior, Multiple untrusted…
• CVE-2018-14812An uncontrolled search path element (DLL Hijacking) vulnerab…
• CVE-2018-14813Fuji Electric V-Server 4.0.3.0 and prior, A heap-based buffe…9.8
• CVE-2018-14815Fuji Electric V-Server 4.0.3.0 and prior, Several out-of-bou…
• CVE-2018-14816Advantech WebAccess 8.3.1 and earlier has several stack-base…9.8
• CVE-2018-14817Fuji Electric V-Server 4.0.3.0 and prior, An integer underfl…
• CVE-2018-14818WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and …9.8
• CVE-2018-14819Fuji Electric V-Server 4.0.3.0 and prior, An out-of-bounds r…
• CVE-2018-14820Advantech WebAccess 8.3.1 and earlier has a .dll component t…