Medium ICSA-18-023-01 2 CVEs

Advantech WebAccess/SCADA

Published Jan 23, 2018 · Updated Jan 23, 2018

Vendor: Advantech Product: WebAccess/SCADA

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 2

Unscored —

CVE-2018-5443

A SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. WebAccess/SCADA does…

Jan 25, 2018
Unscored —

CVE-2018-5445

A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. An attacker has rea…

Jan 25, 2018

Revision history

2018-01-23 #1
ICSA-18-023-01 Advantech WebAccess/SCADA

References

ICS Advisory ICSA-18-023-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-023-01