ICSA-19-178-05

icsaUScisa_csaf_ot

Advantech WebAccess/SCADA

Advisory ansehen veröffentlicht 2019-06-27

Successful exploitation of these vulnerabilities may allow information disclosure, deletion of files, and remote code execution.

01

beschreibt (6)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-10993UScritical9.8—
In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference vulnerabilities may allow a remote attacker to execute arbitrary code.
CVE-2019-10991UScritical9.8—
In WebAccess/SCADA, Versions 8.3.5 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Ex…
CVE-2019-10989UScritical9.8—
In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Expl…
CVE-2019-10987UShigh8.8—
In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitatio…
CVE-2019-10985UScritical9.1—
In WebAccess/SCADA, Versions 8.3.5 and prior, a path traversal vulnerability is caused by a lack of proper validation of a user-supplied path prior to use in file operations. An at…
CVE-2019-10983UShigh7.5—
In WebAccess/SCADA Versions 8.3.5 and prior, an out-of-bounds read vulnerability is caused by a lack of proper validation of user-supplied data. Exploitation of this vulnerability…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (6)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan