ICSA-23-152-01

Advantech WebAccess/SCADA

view advisory published 2023-06-01

Successful exploitation of these vulnerabilities could allow an attacker to arbitrarily overwrite files resulting in remote code execution.

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-32628US	critical9.8	0.71% (53rd)	—	2023-06-06
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify the file extension of a certificate file t…
CVE-2023-32540US	critical9.8	0.90% (59th)	—	2023-06-06
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability, which could allow an attacker to overwrite any file in the operating system (incl…
CVE-2023-22450US	high7.2	0.83% (57th)	—	2023-06-06
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an ASP script file to a webserver when logge…

External citations — patches, advisories, analysis.

FixedWebAccess/SCADA
Advantech recommends WebAccess/SCADA users upgrade to v9.1.4.
https://www.advantech.com/en/support/details/installation?id=1-MS9MJV
FixedWebAccess/SCADA
Advantech recommends WebAccess/SCADA users upgrade to v9.1.4.
https://www.advantech.com/en/support/details/installation?id=1-MS9MJV
FixedWebAccess/SCADA
Advantech recommends WebAccess/SCADA users upgrade to v9.1.4.
https://www.advantech.com/en/support/details/installation?id=1-MS9MJV

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.