Advantech WebAccess
view advisory published 2017-01-12
ATTENTION: Remotely exploitable/low skill level to exploit.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-5154US | critical9.8 | — | ||
An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software… | ||||
| CVE-2017-5152US | critical9.1 | — | ||
An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access pages unres… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- FixedWebAccess
Advantech has produced WebAccess Version 8.2 that mitigates these vulnerabilities. The new version can be downloaded at http://www.advantech.com/industrial-automation/webaccess.
https://urldefense.proofpoint.com/v2/url?u=http-3A__www.advantech.com_industrial-2Dautomation_webaccess&d=DQMGaQ&c=54IZrppPQZKX9mLzcGdPfFD1hxrcB__aEkJFOKJFd00&r=uwyZa8MpvYuELzcbQo3O8w&m=B1NbjjB3HvkL8cRddR7Wjad3cVM_jG_llwiSN6PSdak&s=E0QUbGEoBOGdcHbiGNlYgf9-lEDJpzXH7QL3F94YtUs&e= - FixedWebAccess
Advantech has produced WebAccess Version 8.2 that mitigates these vulnerabilities. The new version can be downloaded at http://www.advantech.com/industrial-automation/webaccess.
https://urldefense.proofpoint.com/v2/url?u=http-3A__www.advantech.com_industrial-2Dautomation_webaccess&d=DQMGaQ&c=54IZrppPQZKX9mLzcGdPfFD1hxrcB__aEkJFOKJFd00&r=uwyZa8MpvYuELzcbQo3O8w&m=B1NbjjB3HvkL8cRddR7Wjad3cVM_jG_llwiSN6PSdak&s=E0QUbGEoBOGdcHbiGNlYgf9-lEDJpzXH7QL3F94YtUs&e=
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan