Skip to content
OpenAdvisories
High ICSA-18-004-02A 7 CVEs

Advantech WebAccess (Update A)

Published Jan 4, 2018 · Updated Jan 11, 2018 · Revision 2

Vendor: Advantech Product: WebAccess

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 7

  • Unscored —
    CVE-2017-16716 Public exploit

    A SQL Injection issue was discovered in WebAccess versions prior to 8.3. WebAccess does not properly sanitize its input…

  • Unscored —
    CVE-2017-16720 Public exploit EPSS 50%

    A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within t…

  • Unscored —
    CVE-2017-16724

    A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple ins…

  • Unscored —
    CVE-2017-16728

    An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple …

  • Unscored —
    CVE-2017-16732

    A use-after-free issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows an unauthenticated…

  • Unscored —
    CVE-2017-16736

    An Unrestricted Upload Of File With Dangerous Type issue was discovered in Advantech WebAccess versions prior to 8.3. W…

  • Unscored —
    CVE-2017-16753

    An Improper Input Validation issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows some i…

Revision history

  1. #2

    ICSA-18-004-02A Advantech WebAccess (Update A)

  2. #1

    ICSA-18-004-02 Advantech WebAccess

References