Skip to content
OpenAdvisories
Critical ICSA-12-047-01A 18 CVEs

Advantech WebAccess Vulnerabilities

Published Nov 19, 2012 · Updated Jun 17, 2025 · Revision 2

Vendor: Advantech/Broadwin Product: WebAccess

Vulnerabilities 18

  • Unscored —
    CVE-2011-4521

    SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2011-4522

    Cross-site scripting (XSS) vulnerability in bwerrdn.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attack…

  • Unscored —
    CVE-2011-4523

    Cross-site scripting (XSS) vulnerability in bwview.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attacke…

  • Unscored —
    CVE-2011-4524

    Buffer overflow in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via a long…

  • Unscored —
    CVE-2011-4525

    Advantech/BroadWin WebAccess before 7.0 allows remote attackers to trigger the extraction of arbitrary web content into…

  • Unscored —
    CVE-2011-4526

    Buffer overflow in an ActiveX control in Advantech/BroadWin WebAccess before 7.0 might allow remote attackers to execut…

  • Unscored —
    CVE-2012-0233

    Cross-site scripting (XSS) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject a…

  • Unscored —
    CVE-2012-0234

    SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2012-0235

    Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to h…

  • Unscored —
    CVE-2012-0236

    Advantech/BroadWin WebAccess 7.0 and earlier allows remote attackers to obtain sensitive information via a direct reque…

  • Unscored —
    CVE-2012-0237

    Advantech/BroadWin WebAccess before 7.0 allows remote attackers to (1) enable date and time syncing or (2) disable date…

  • Unscored —
    CVE-2012-0238

    Stack-based buffer overflow in opcImg.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute…

  • Unscored —
    CVE-2012-0239

    uaddUpAdmin.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remot…

  • Unscored —
    CVE-2012-0240

    GbScriptAddUp.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows rem…

  • Unscored —
    CVE-2012-0241 Public exploit

    Advantech/BroadWin WebAccess before 7.0 allows remote attackers to cause a denial of service (memory corruption) via a …

  • Unscored —
    CVE-2012-0242 Public exploit

    Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary cod…

  • Unscored —
    CVE-2012-0243

    Buffer overflow in an ActiveX control in bwocxrun.ocx in Advantech/BroadWin WebAccess before 7.0 allows remote attacker…

  • Unscored —
    CVE-2012-0244

    Multiple SQL injection vulnerabilities in Advantech/BroadWin WebAccess before 7.0 allow remote attackers to execute arb…

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References