Advantech WebAccess/SCADA
view advisory published 2024-03-21
Successful exploitation of this vulnerability could allow an authenticated attacker to read or modify a remote database.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-2453US | — | — | ||
There is an SQL injection vulnerability in Advantech WebAccess/SCADA software that allows an authenticated attacker to remotely inject SQL code in the database. Successful exploit… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-081-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-081-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- FixedWebAccess/SCADA
Advantech recomends updating WebAccess/SCADA to version 9.1.6 or higher to mitigate this vulnerability.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan