Advantech WebAccess (Update A)
ATTENTION: Remotely exploitable/low skill level to exploit.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-16736US | high7.5 | — | ||
An Unrestricted Upload Of File With Dangerous Type issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows a remote attacker to upload arbitrary files. | ||||
| CVE-2017-16732US | medium6.5 | — | ||
A use-after-free issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows an unauthenticated attacker to specify an arbitrary address. | ||||
| CVE-2017-16753US | high7.5 | — | ||
An Improper Input Validation issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows some inputs that may cause the program to crash. | ||||
| CVE-2017-16728US | high7.5 | — | ||
An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the progr… | ||||
| CVE-2017-16724US | critical9.8 | — | ||
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple instances of a vulnerability that allows too much data to be wri… | ||||
| CVE-2017-16720US | critical9.8 | Exploit | ||
A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within the directory structure of the target device. | ||||
| CVE-2017-16716US | critical9.8 | Exploit | ||
A SQL Injection issue was discovered in WebAccess versions prior to 8.3. WebAccess does not properly sanitize its inputs for SQL commands. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (7)
- BehobenWebAccess
Advantech has released WebAccess Version 8.3 to address the reported vulnerabilities. Users can download the latest version of WebAccess (registration required)
http://www.advantech.com/industrial-automation/webaccess/download - BehobenWebAccess
Advantech has released WebAccess Version 8.3 to address the reported vulnerabilities. Users can download the latest version of WebAccess (registration required)
http://www.advantech.com/industrial-automation/webaccess/download - BehobenWebAccess
Advantech has released WebAccess Version 8.3 to address the reported vulnerabilities. Users can download the latest version of WebAccess (registration required)
http://www.advantech.com/industrial-automation/webaccess/download - BehobenWebAccess
Advantech has released WebAccess Version 8.3 to address the reported vulnerabilities. Users can download the latest version of WebAccess (registration required)
http://www.advantech.com/industrial-automation/webaccess/download - BehobenWebAccess
Advantech has released WebAccess Version 8.3 to address the reported vulnerabilities. Users can download the latest version of WebAccess (registration required)
http://www.advantech.com/industrial-automation/webaccess/download - BehobenWebAccess
Advantech has released WebAccess Version 8.3 to address the reported vulnerabilities. Users can download the latest version of WebAccess (registration required)
http://www.advantech.com/industrial-automation/webaccess/download - BehobenWebAccess
Advantech has released WebAccess Version 8.3 to address the reported vulnerabilities. Users can download the latest version of WebAccess (registration required)
http://www.advantech.com/industrial-automation/webaccess/download
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan