Advantech WebAccess
view advisory published 2017-11-02
ATTENTION: Remotely exploitable/low skill level to exploit.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-14016US | medium6.3 | Exploit | ||
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The application lacks proper validation of the length of user-supplied da… | ||||
| CVE-2017-12719US | high7.5 | — | ||
An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to dereference a pointer wit… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- FixedWebAccess
Advantech has released a new version of WebAccess to address the reported vulnerabilities. Users can download the latest version of WebAccess at the following location (registration required):
http://www.advantech.com/industrial-automation/webaccess - FixedWebAccess
Advantech has released a new version of WebAccess to address the reported vulnerabilities. Users can download the latest version of WebAccess at the following location (registration required):
http://www.advantech.com/industrial-automation/webaccess
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan