Advantech WebAccess Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2014-0992US | medium6.8 | — | ||
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the password parameter. | ||||
| CVE-2014-0991US | medium6.8 | — | ||
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the projectname parameter. | ||||
| CVE-2014-0990US | medium6.8 | — | ||
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the UserName parameter. | ||||
| CVE-2014-0989US | medium6.8 | — | ||
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode2 parameter. | ||||
| CVE-2014-0988US | medium6.8 | — | ||
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode parameter. | ||||
| CVE-2014-0987US | medium6.8 | — | ||
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName2 parameter. | ||||
| CVE-2014-0986US | medium6.8 | — | ||
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the GotoCmd parameter. | ||||
| CVE-2014-0985US | medium6.8 | — | ||
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName parameter. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-14-261-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-261-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (8)
- MitigationWebAccess
Advantech has created a patch (AdvantechWebAccessUSANode_20140730_3.4.3.exe) that mitigates each of the vulnerabilities described above. Users may download the patch from the following location at Advantech’s web site (http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe)
http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe - MitigationWebAccess
Advantech has created a patch (AdvantechWebAccessUSANode_20140730_3.4.3.exe) that mitigates each of the vulnerabilities described above. Users may download the patch from the following location at Advantech’s web site (http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe)
http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe - MitigationWebAccess
Advantech has created a patch (AdvantechWebAccessUSANode_20140730_3.4.3.exe) that mitigates each of the vulnerabilities described above. Users may download the patch from the following location at Advantech’s web site (http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe)
http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe - MitigationWebAccess
Advantech has created a patch (AdvantechWebAccessUSANode_20140730_3.4.3.exe) that mitigates each of the vulnerabilities described above. Users may download the patch from the following location at Advantech’s web site (http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe)
http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe - MitigationWebAccess
Advantech has created a patch (AdvantechWebAccessUSANode_20140730_3.4.3.exe) that mitigates each of the vulnerabilities described above. Users may download the patch from the following location at Advantech’s web site (http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe)
http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe - MitigationWebAccess
Advantech has created a patch (AdvantechWebAccessUSANode_20140730_3.4.3.exe) that mitigates each of the vulnerabilities described above. Users may download the patch from the following location at Advantech’s web site (http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe)
http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe - MitigationWebAccess
Advantech has created a patch (AdvantechWebAccessUSANode_20140730_3.4.3.exe) that mitigates each of the vulnerabilities described above. Users may download the patch from the following location at Advantech’s web site (http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe)
http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe - MitigationWebAccess
Advantech has created a patch (AdvantechWebAccessUSANode_20140730_3.4.3.exe) that mitigates each of the vulnerabilities described above. Users may download the patch from the following location at Advantech’s web site (http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe)
http://advantech.vo.llnwd.net/o35/www/webaccess/webaccess7.2/AdvantechWebAccessUSANode_20140730_3.4.3.exe
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan