Advantech WebAccess Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-0992US | medium6.8 | — | ||
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the password parameter. | ||||
| CVE-2014-0991US | medium6.8 | — | ||
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the projectname parameter. | ||||
| CVE-2014-0990US | medium6.8 | — | ||
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the UserName parameter. | ||||
| CVE-2014-0989US | medium6.8 | — | ||
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode2 parameter. | ||||
| CVE-2014-0988US | medium6.8 | — | ||
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode parameter. | ||||
| CVE-2014-0987US | medium6.8 | — | ||
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName2 parameter. | ||||
| CVE-2014-0986US | medium6.8 | — | ||
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the GotoCmd parameter. | ||||
| CVE-2014-0985US | medium6.8 | — | ||
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName parameter. | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-14-261-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-261-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationWebAccess
Advantech has created a patch (AdvantechWebAccessUSANode_20140730_3.4.3.exe) that mitigates each of the vulnerabilities described above. Users may download the patch from the following location at Advantech’s web site (http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe)
http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe - MitigationWebAccess
Advantech has created a patch (AdvantechWebAccessUSANode_20140730_3.4.3.exe) that mitigates each of the vulnerabilities described above. Users may download the patch from the following location at Advantech’s web site (http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe)
http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe - MitigationWebAccess
Advantech has created a patch (AdvantechWebAccessUSANode_20140730_3.4.3.exe) that mitigates each of the vulnerabilities described above. Users may download the patch from the following location at Advantech’s web site (http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe)
http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe - MitigationWebAccess
Advantech has created a patch (AdvantechWebAccessUSANode_20140730_3.4.3.exe) that mitigates each of the vulnerabilities described above. Users may download the patch from the following location at Advantech’s web site (http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe)
http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe - MitigationWebAccess
Advantech has created a patch (AdvantechWebAccessUSANode_20140730_3.4.3.exe) that mitigates each of the vulnerabilities described above. Users may download the patch from the following location at Advantech’s web site (http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe)
http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe - MitigationWebAccess
Advantech has created a patch (AdvantechWebAccessUSANode_20140730_3.4.3.exe) that mitigates each of the vulnerabilities described above. Users may download the patch from the following location at Advantech’s web site (http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe)
http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe - MitigationWebAccess
Advantech has created a patch (AdvantechWebAccessUSANode_20140730_3.4.3.exe) that mitigates each of the vulnerabilities described above. Users may download the patch from the following location at Advantech’s web site (http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe)
http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe - MitigationWebAccess
Advantech has created a patch (AdvantechWebAccessUSANode_20140730_3.4.3.exe) that mitigates each of the vulnerabilities described above. Users may download the patch from the following location at Advantech’s web site (http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe)
http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan