Advantech WebOP

An attacker with local access to a WebOP operator interface could exploit a buffer overflow to gain information disclosure or cause the device to crash, disrupting operator visibility into plant processes.

Human-machine interface (HMI) operators at water, power, and manufacturing facilities using Advantech WebOP for process visualization and control. This impacts any site relying on WebOP for remote plant monitoring and operation.

An attacker must first gain local access to the WebOP machine (physical access or compromised workstation). They would then trigger the buffer overflow vulnerability, potentially through a malformed input or file upload to the WebOP application. This could lead to information disclosure or denial of service.