Advantech WebAccess/SCADA
view advisory published 2019-04-02
Successful exploitation of these vulnerabilities may cause a denial of service and allow remote code execution.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-6554US | high7.5 | — | ||
Advantech WebAccess/SCADA, Versions 8.3.5 and prior. An improper access control vulnerability may allow an attacker to cause a denial-of-service condition. | ||||
| CVE-2019-6552US | critical9.8 | — | ||
Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple command injection vulnerabilities, caused by a lack of proper validation of user-supplied data, may allow remote code… | ||||
| CVE-2019-6550US | critical9.8 | — | ||
Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple stack-based buffer overflow vulnerabilities, caused by a lack of proper validation of the length of user-supplied data… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (3)
- FixedWebAccess/SCADA
Advantech has released Version 8.4.0 of WebAccess/SCADA to address the reported vulnerabilities.
https://support.advantech.com/support/DownloadSRDetail_New.aspx?SR_ID=1-MS9MJV&Doc_Source=Download - FixedWebAccess/SCADA
Advantech has released Version 8.4.0 of WebAccess/SCADA to address the reported vulnerabilities.
https://support.advantech.com/support/DownloadSRDetail_New.aspx?SR_ID=1-MS9MJV&Doc_Source=Download - FixedWebAccess/SCADA
Advantech has released Version 8.4.0 of WebAccess/SCADA to address the reported vulnerabilities.
https://support.advantech.com/support/DownloadSRDetail_New.aspx?SR_ID=1-MS9MJV&Doc_Source=Download
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan