Advantech WebAccess Buffer Overflow Vulnerability
view advisory published 2015-06-11
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-9208US | high10.0 | Exploit | ||
Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attackers to execute arbitrary code via unknown vectors. | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-15-251-01A JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-15-251-01A - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- MitigationWebAccess
Advantech has released a new version of WebAccess, Version 8.0_20150816, to mitigate the reported vulnerability. WebAccess, Version 8.0_20150816, is available at the following URL: (http://www.advantech.com/industrial-automation/webaccess)
http://www.advantech.com/industrial-automation/webaccess
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan