CVE-2020-16213

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, which may allow remote code execution, disclosure/modification of information, or cause the application to crash.

• CWE-787
• CWE-787

• https://us-cert.cisa.gov/ics/advisories/icsa-20-219-02Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-20-956/Third Party Advisory, VDB Entry
• https://us-cert.cisa.gov/ics/advisories/icsa-20-219-02Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-20-956/Third Party Advisory, VDB Entry

Published

Aug 6, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-16208The affected product is vulnerable to cross-site request for…8.8
• CVE-2020-16209A malicious attacker could exploit the interface of the Fiel…9.8
• CVE-2020-1621A local, authenticated user with shell can obtain the hashed…5.5
• CVE-2020-16210The affected product is vulnerable to reflected cross-site s…9
• CVE-2020-16211Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prio…5.5
• CVE-2020-16212In Patient Information Center iX (PICiX) Versions B.02, C.02…6.8
• CVE-2020-16214In Patient Information Center iX (PICiX) Versions B.02, C.02…5
• CVE-2020-16215Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prio…7.8
• CVE-2020-16216In IntelliVue patient monitors MX100, MX400-550, MX600, MX70…6.5
• CVE-2020-16217Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prio…7.8
• CVE-2020-16218In Patient Information Center iX (PICiX) Versions B.02, C.02…3.5
• CVE-2020-16219Delta Electronics TPEditor Versions 1.97 and prior. An out-o…7.8