Advantech WebAccess/SCADA
Advisory ansehen veröffentlicht 2018-01-23
ATTENTION: Remotely exploitable/low skill level to exploit.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-5445US | medium5.3 | — | ||
A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. An attacker has read access to files within the directory structure of the targe… | ||||
| CVE-2018-5443US | medium5.3 | — | ||
A SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. WebAccess/SCADA does not properly sanitize its inputs for SQL commands. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (2)
- BehobenWebAccess/SCADA
Advantech has released a version 8.3.0 of WebAccess/SCADA to address the reported vulnerabilities. Users can download the latest version of WebAccess/SCADA (registration required)
http://www.advantech.com/industrial-automation/webaccess/download - BehobenWebAccess/SCADA
Advantech has released a version 8.3.0 of WebAccess/SCADA to address the reported vulnerabilities. Users can download the latest version of WebAccess/SCADA (registration required)
http://www.advantech.com/industrial-automation/webaccess/download
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan