ICSA-19-260-01

icsaUScisa_csaf_ot

Advantech WebAccess

Advisory ansehen veröffentlicht 2019-09-17

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, access files and perform actions at a privileged level, or delete files on the system.

01

beschreibt (4)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-13558UScritical9.8—
In WebAccess versions 8.4.1 and prior, an exploit executed over the network may cause improper control of generation of code, which may allow remote code execution, data exfiltrati…
CVE-2019-13556UShigh8.8—
In WebAccess versions 8.4.1 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitat…
CVE-2019-13552UShigh8.8—
In WebAccess versions 8.4.1 and prior, multiple command injection vulnerabilities are caused by a lack of proper validation of user-supplied data and may allow arbitrary file delet…
CVE-2019-13550UScritical9.8—
In WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an attacker to disclose sensitive information, cause improper control of generation of cod…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan