Advantech WebAccess
Advisory ansehen veröffentlicht 2017-01-12
ATTENTION: Remotely exploitable/low skill level to exploit.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-5154US | critical9.8 | — | ||
An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software… | ||||
| CVE-2017-5152US | critical9.1 | — | ||
An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access pages unres… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (2)
- BehobenWebAccess
Advantech has produced WebAccess Version 8.2 that mitigates these vulnerabilities. The new version can be downloaded at http://www.advantech.com/industrial-automation/webaccess.
https://urldefense.proofpoint.com/v2/url?u=http-3A__www.advantech.com_industrial-2Dautomation_webaccess&d=DQMGaQ&c=54IZrppPQZKX9mLzcGdPfFD1hxrcB__aEkJFOKJFd00&r=uwyZa8MpvYuELzcbQo3O8w&m=B1NbjjB3HvkL8cRddR7Wjad3cVM_jG_llwiSN6PSdak&s=E0QUbGEoBOGdcHbiGNlYgf9-lEDJpzXH7QL3F94YtUs&e= - BehobenWebAccess
Advantech has produced WebAccess Version 8.2 that mitigates these vulnerabilities. The new version can be downloaded at http://www.advantech.com/industrial-automation/webaccess.
https://urldefense.proofpoint.com/v2/url?u=http-3A__www.advantech.com_industrial-2Dautomation_webaccess&d=DQMGaQ&c=54IZrppPQZKX9mLzcGdPfFD1hxrcB__aEkJFOKJFd00&r=uwyZa8MpvYuELzcbQo3O8w&m=B1NbjjB3HvkL8cRddR7Wjad3cVM_jG_llwiSN6PSdak&s=E0QUbGEoBOGdcHbiGNlYgf9-lEDJpzXH7QL3F94YtUs&e=
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan