Advantech WebAccess (Update A)
ATTENTION: Remotely exploitable/low skill level to exploit.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-16736US | high7.5 | — | ||
An Unrestricted Upload Of File With Dangerous Type issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows a remote attacker to upload arbitrary files. | ||||
| CVE-2017-16732US | medium6.5 | — | ||
A use-after-free issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows an unauthenticated attacker to specify an arbitrary address. | ||||
| CVE-2017-16753US | high7.5 | — | ||
An Improper Input Validation issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows some inputs that may cause the program to crash. | ||||
| CVE-2017-16728US | high7.5 | — | ||
An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the progr… | ||||
| CVE-2017-16724US | critical9.8 | — | ||
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple instances of a vulnerability that allows too much data to be wri… | ||||
| CVE-2017-16720US | critical9.8 | Exploit | ||
A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within the directory structure of the target device. | ||||
| CVE-2017-16716US | critical9.8 | Exploit | ||
A SQL Injection issue was discovered in WebAccess versions prior to 8.3. WebAccess does not properly sanitize its inputs for SQL commands. | ||||
references
External citations — patches, advisories, analysis.
remediations (7)
- FixedWebAccess
Advantech has released WebAccess Version 8.3 to address the reported vulnerabilities. Users can download the latest version of WebAccess (registration required)
http://www.advantech.com/industrial-automation/webaccess/download - FixedWebAccess
Advantech has released WebAccess Version 8.3 to address the reported vulnerabilities. Users can download the latest version of WebAccess (registration required)
http://www.advantech.com/industrial-automation/webaccess/download - FixedWebAccess
Advantech has released WebAccess Version 8.3 to address the reported vulnerabilities. Users can download the latest version of WebAccess (registration required)
http://www.advantech.com/industrial-automation/webaccess/download - FixedWebAccess
Advantech has released WebAccess Version 8.3 to address the reported vulnerabilities. Users can download the latest version of WebAccess (registration required)
http://www.advantech.com/industrial-automation/webaccess/download - FixedWebAccess
Advantech has released WebAccess Version 8.3 to address the reported vulnerabilities. Users can download the latest version of WebAccess (registration required)
http://www.advantech.com/industrial-automation/webaccess/download - FixedWebAccess
Advantech has released WebAccess Version 8.3 to address the reported vulnerabilities. Users can download the latest version of WebAccess (registration required)
http://www.advantech.com/industrial-automation/webaccess/download - FixedWebAccess
Advantech has released WebAccess Version 8.3 to address the reported vulnerabilities. Users can download the latest version of WebAccess (registration required)
http://www.advantech.com/industrial-automation/webaccess/download
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan