Advantech WebAccess/SCADA
Successful exploitation of these vulnerabilities may allow an attacker to access and manipulate sensitive data.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-6523US | critical9.8 | — | ||
WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands. | ||||
| CVE-2019-6521US | high8.6OT elevated | — | ||
WebAccess/SCADA, Version 8.3. Specially crafted requests could allow a possible authentication bypass that could allow an attacker to obtain and manipulate sensitive information. | ||||
| CVE-2019-6519US | critical9.8 | — | ||
WebAccess/SCADA, Version 8.3. An improper authentication vulnerability exists that could allow a possible authentication bypass allowing an attacker to upload malicious data. | ||||
references
External citations — patches, advisories, analysis.
remediations (3)
- FixedWebAccess/SCADA
Advantech has released Version 8.3.5 of WebAccess/SCADA to address the reported vulnerabilities. Users can download the latest version of WebAccess/SCADA at the following location (registration required):
https://urldefense.proofpoint.com/v2/url?u=https-3A__support.advantech.com_support_DownloadSRDetail-5FNew.aspx-3FSR-5FID-3D1-2DMS9MJV-26Doc-5FSource-3DDownload&d=DwMFAg&c=54IZrppPQZKX9mLzcGdPfFD1hxrcB__aEkJFOKJFd00&r=bd4G77mdhJayq8hCsaGH3eJ3oTDOURCwn88GATyKPJM&m=uVDoRgrHhHX88anG8A3hRN3SSzs20a5SSAUK4W6QE3g&s=ZzwMLJynAk12jVrLdGX63bHJkGeSBNQZR9c8S5tNViY&e= - FixedWebAccess/SCADA
Advantech has released Version 8.3.5 of WebAccess/SCADA to address the reported vulnerabilities. Users can download the latest version of WebAccess/SCADA at the following location (registration required):
https://urldefense.proofpoint.com/v2/url?u=https-3A__support.advantech.com_support_DownloadSRDetail-5FNew.aspx-3FSR-5FID-3D1-2DMS9MJV-26Doc-5FSource-3DDownload&d=DwMFAg&c=54IZrppPQZKX9mLzcGdPfFD1hxrcB__aEkJFOKJFd00&r=bd4G77mdhJayq8hCsaGH3eJ3oTDOURCwn88GATyKPJM&m=uVDoRgrHhHX88anG8A3hRN3SSzs20a5SSAUK4W6QE3g&s=ZzwMLJynAk12jVrLdGX63bHJkGeSBNQZR9c8S5tNViY&e= - FixedWebAccess/SCADA
Advantech has released Version 8.3.5 of WebAccess/SCADA to address the reported vulnerabilities. Users can download the latest version of WebAccess/SCADA at the following location (registration required):
https://urldefense.proofpoint.com/v2/url?u=https-3A__support.advantech.com_support_DownloadSRDetail-5FNew.aspx-3FSR-5FID-3D1-2DMS9MJV-26Doc-5FSource-3DDownload&d=DwMFAg&c=54IZrppPQZKX9mLzcGdPfFD1hxrcB__aEkJFOKJFd00&r=bd4G77mdhJayq8hCsaGH3eJ3oTDOURCwn88GATyKPJM&m=uVDoRgrHhHX88anG8A3hRN3SSzs20a5SSAUK4W6QE3g&s=ZzwMLJynAk12jVrLdGX63bHJkGeSBNQZR9c8S5tNViY&e=
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan