Advantech WebAccess/SCADA
view advisory published 2018-01-23
ATTENTION: Remotely exploitable/low skill level to exploit.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-5445US | medium5.3 | — | ||
A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. An attacker has read access to files within the directory structure of the targe… | ||||
| CVE-2018-5443US | medium5.3 | — | ||
A SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. WebAccess/SCADA does not properly sanitize its inputs for SQL commands. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- FixedWebAccess/SCADA
Advantech has released a version 8.3.0 of WebAccess/SCADA to address the reported vulnerabilities. Users can download the latest version of WebAccess/SCADA (registration required)
http://www.advantech.com/industrial-automation/webaccess/download - FixedWebAccess/SCADA
Advantech has released a version 8.3.0 of WebAccess/SCADA to address the reported vulnerabilities. Users can download the latest version of WebAccess/SCADA (registration required)
http://www.advantech.com/industrial-automation/webaccess/download
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan