CVE-2019-16899: Advantech Webaccess/hmi Designer

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PM_V3!CTagInfoThreadBase::GetNICInfo+0x0000000000512918.

Affected products

• Advantech Webaccess/hmi Designer: version 2.1.9.31 only

Published 2019-09-26. Last modified 2026-06-17.