Critical ICSA-17-012-01 2 CVEs

Advantech WebAccess

Published Jan 12, 2017 · Updated Jan 12, 2017

Vendor: Advantech Product: WebAccess

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 2

Unscored —

CVE-2017-5152

An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator (URL) on t…

Feb 13, 2017
Unscored —

CVE-2017-5154

An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an a…

Feb 13, 2017

Revision history

2017-01-12 #1
ICSA-17-012-01 Advantech WebAccess Vulnerabilities

References

ICS Advisory ICSA-17-012-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-012-01
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-012-01