Critical ICSA-18-135-01 11 CVEs

Advantech WebAccess

Published May 15, 2018 · Updated May 15, 2018

Vendor: Advantech Product: WebAccess Product: WebAccess Dashboard Product: WebAccess Scada Node Product: WebAccess/NMS

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information from the host and/or target, execute arbitrary code, or delete files.

Vulnerabilities 11

Unscored —

CVE-2018-10589

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versi…

Advantech WebAccess

May 15, 2018
Unscored —

CVE-2018-10590

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versi…

Advantech WebAccess

May 15, 2018
Unscored —

CVE-2018-10591

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versi…

Advantech WebAccess

May 15, 2018
Unscored —

CVE-2018-7495

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versi…

Advantech WebAccess

May 15, 2018
Unscored —

CVE-2018-7497

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versi…

Advantech WebAccess

May 15, 2018
Unscored —

CVE-2018-7499

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versi…

Advantech WebAccess

May 15, 2018
Unscored —

CVE-2018-7501

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versi…

Advantech WebAccess

May 15, 2018
Unscored —

CVE-2018-7503

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versi…

Advantech WebAccess

May 15, 2018
Unscored —

CVE-2018-7505

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versi…

Advantech WebAccess

May 15, 2018
Unscored —

CVE-2018-8841

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versi…

Advantech WebAccess

May 15, 2018
Unscored —

CVE-2018-8845

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versi…

Advantech WebAccess

May 15, 2018

Revision history

2018-05-15 #1
ICSA-18-135-01 Advantech WebAccess

References

ICS Advisory ICSA-18-135-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-135-01
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-18-135-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/