ICSA-19-178-05

icsaUScisa_csaf_ot

Advantech WebAccess/SCADA

view advisory published 2019-06-27

Successful exploitation of these vulnerabilities may allow information disclosure, deletion of files, and remote code execution.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2019-10993UScritical9.8—
In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference vulnerabilities may allow a remote attacker to execute arbitrary code.
CVE-2019-10991UScritical9.8—
In WebAccess/SCADA, Versions 8.3.5 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Ex…
CVE-2019-10989UScritical9.8—
In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Expl…
CVE-2019-10987UShigh8.8—
In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitatio…
CVE-2019-10985UScritical9.1—
In WebAccess/SCADA, Versions 8.3.5 and prior, a path traversal vulnerability is caused by a lack of proper validation of a user-supplied path prior to use in file operations. An at…
CVE-2019-10983UShigh7.5—
In WebAccess/SCADA Versions 8.3.5 and prior, an out-of-bounds read vulnerability is caused by a lack of proper validation of user-supplied data. Exploitation of this vulnerability…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan