LS Electric GMWin 4

An attacker with local access to a machine running GMWin 4 could read sensitive engineering data or execute arbitrary code to modify control logic or system configuration. Since GMWin 4 is typically used for engineering and configuration of automation systems, compromise could affect plant operations if the attacker gains access to connected control devices.

Organizations in the energy sector that use LS Electric GMWin 4 for engineering, configuration, and maintenance of automation systems should be concerned. This includes utilities operating power generation, transmission, and distribution systems that rely on GMWin 4 for HMI/SCADA engineering and configuration workstations. Any facility using GMWin 4 for control system programming is affected.

An attacker would need local access to a Windows machine running GMWin 4 and could trigger the buffer overflow vulnerability through a malicious file or input to the application. The attacker would likely need to get a user to interact with the application (open a crafted file or project), then the vulnerability could execute code in the context of the GMWin 4 user account.