ICSA-20-161-01

Advantech WebAccess Node

view advisory published 2020-06-09

Successful exploitation of this vulnerability could crash the application being accessed; a buffer overflow condition may allow remote code execution.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-12019US	critical9.8	2.17% (82nd)	—	2020-06-15
WebAccess Node Version 8.4.4 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.

references

External citations — patches, advisories, analysis.

ICS Advisory ICSA-20-161-01 JSONself
ICS Advisory ICSA-20-161-01 Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

remediations (1)

FixedWebAccess Node
Advantech has released patch P0520844 for WebAccess Node Version 8.4.4 to address the reported vulnerability.
https://support.advantech.com/support/DownloadSRDetail_New.aspx?SR_ID=1-MS9MJV&Doc_Source=Download

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan