Advantech WebAccess
Advisory ansehen veröffentlicht 2017-11-02
ATTENTION: Remotely exploitable/low skill level to exploit.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-14016US | medium6.3 | Exploit | ||
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The application lacks proper validation of the length of user-supplied da… | ||||
| CVE-2017-12719US | high7.5 | — | ||
An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to dereference a pointer wit… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (2)
- BehobenWebAccess
Advantech has released a new version of WebAccess to address the reported vulnerabilities. Users can download the latest version of WebAccess at the following location (registration required):
http://www.advantech.com/industrial-automation/webaccess - BehobenWebAccess
Advantech has released a new version of WebAccess to address the reported vulnerabilities. Users can download the latest version of WebAccess at the following location (registration required):
http://www.advantech.com/industrial-automation/webaccess
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan