SMART-HMI SECURITY ADVISORY
CVE-2024-8752 Updated 2026-10-16 06:13

Fix for CVE-2024-8752

Please follow the instructions below to mitigate the vulnerability. If you have questions, contact the Smart-HMI Security Team.

Permalink
  • Release: Software Version 2.16.1
  • Severity: High
  • Release Date: 2025-02-11

We have released version 2.16.1 to address a security vulnerability, CVE-2024-8752, affecting versions 2.11.0 through 2.16.0.

How the Software is Affected

The Windows version of WebIQ 2.15.9 is affected by a directory traversal vulnerability that allows remote attackers to read any file on the system. The vulnerability exists in the software's input validation mechanism. Under certain conditions, a remote attacker could exploit insufficiently validated input to execute unauthorized actions.

Recommended Action

We strongly recommend that all customers running affected versions upgrade to version 2.16.1 as soon as possible. No workaround is available.

For further details or assistance with the update, please contact our support team

We take security seriously and appreciate your cooperation in keeping your systems protected.

WebIQ Security Center
Action completed.