Advantech WebAccess SCADA
Advisory ansehen veröffentlicht 2021-08-05
Successful exploitation of these vulnerabilities could allow an attacker to hijack a user 's cookie/session tokens, gain unauthorized access to files and directories, and execute arbitrary code.
01
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-32943US | critical9.8 | — | ||
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code on the WebAccess/SCADA (WebAccess/SCADA versions… | ||||
| CVE-2021-22676US | medium6.1 | — | ||
UserExcelOut.asp within WebAccess/SCADA is vulnerable to cross-site scripting (XSS), which could allow an attacker to send malicious JavaScript code. This could result in hijacking… | ||||
| CVE-2021-22674US | medium6.5 | — | ||
The affected product is vulnerable to a relative path traversal condition, which may allow an attacker access to unauthorized files and directories on the WebAccess/SCADA (WebAcces… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (3)
- MitigationWebAccess/SCADA
Advantech recommends users running version 8 of the software to update to Version 8.4.5
https://www.advantech.tw/support/details/installation?id=1-MS9MJV - MitigationWebAccess/SCADA
Advantech recommends users running version 8 of the software to update to Version 8.4.5
https://www.advantech.tw/support/details/installation?id=1-MS9MJV - MitigationWebAccess/SCADA
Advantech recommends users running version 8 of the software to update to Version 8.4.5
https://www.advantech.tw/support/details/installation?id=1-MS9MJV
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan