High ICSA-17-241-02 9 CVEs

Advantech WebAccess

Published Aug 29, 2017 · Updated Aug 29, 2017

Vendor: Advantech Product: WebAccess

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 9

Unscored —

CVE-2017-12698

An Improper Authentication issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Specially craft…

Aug 30, 2017
Unscored —

CVE-2017-12702

An Externally Controlled Format String issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Str…

Aug 30, 2017
Unscored —

CVE-2017-12704

A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers h…

Aug 30, 2017
Unscored —

CVE-2017-12706

A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers …

Aug 30, 2017
Unscored —

CVE-2017-12708

An Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered in Advantech WebAccess …

Aug 30, 2017
Unscored —

CVE-2017-12710

A SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. By submitting a specially …

Aug 30, 2017
Unscored —

CVE-2017-12711

An Incorrect Privilege Assignment issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A built-…

Aug 30, 2017
Unscored —

CVE-2017-12713

An Incorrect Permission Assignment for Critical Resource issue was discovered in Advantech WebAccess versions prior to …

Aug 30, 2017
Unscored —

CVE-2017-12717

An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A mali…

Aug 30, 2017

Revision history

2017-08-29 #1
ICSA-17-241-02 Advantech WebAccess

References

ICS Advisory ICSA-17-241-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-241-02
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-241-02