Advantech WebAccess SCADA
view advisory published 2021-08-05
Successful exploitation of these vulnerabilities could allow an attacker to hijack a user 's cookie/session tokens, gain unauthorized access to files and directories, and execute arbitrary code.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-32943US | critical9.8 | — | ||
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code on the WebAccess/SCADA (WebAccess/SCADA versions… | ||||
| CVE-2021-22676US | medium6.1 | — | ||
UserExcelOut.asp within WebAccess/SCADA is vulnerable to cross-site scripting (XSS), which could allow an attacker to send malicious JavaScript code. This could result in hijacking… | ||||
| CVE-2021-22674US | medium6.5 | — | ||
The affected product is vulnerable to a relative path traversal condition, which may allow an attacker access to unauthorized files and directories on the WebAccess/SCADA (WebAcces… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (3)
- MitigationWebAccess/SCADA
Advantech recommends users running version 8 of the software to update to Version 8.4.5
https://www.advantech.tw/support/details/installation?id=1-MS9MJV - MitigationWebAccess/SCADA
Advantech recommends users running version 8 of the software to update to Version 8.4.5
https://www.advantech.tw/support/details/installation?id=1-MS9MJV - MitigationWebAccess/SCADA
Advantech recommends users running version 8 of the software to update to Version 8.4.5
https://www.advantech.tw/support/details/installation?id=1-MS9MJV
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan