Skip to content
OpenAdvisories
Critical ICSA-19-178-05 6 CVEs

Advantech WebAccess/SCADA

Published Jun 27, 2019 · Updated Jun 27, 2019

Vendor: Advantech Product: WebAccess/SCADA

Summary

Successful exploitation of these vulnerabilities may allow information disclosure, deletion of files, and remote code execution.

Vulnerabilities 6

  • Unscored —
    CVE-2019-10983

    In WebAccess/SCADA Versions 8.3.5 and prior, an out-of-bounds read vulnerability is caused by a lack of proper validati…

    WebAccess WebAccess/SCADA
  • Unscored —
    CVE-2019-10985

    In WebAccess/SCADA, Versions 8.3.5 and prior, a path traversal vulnerability is caused by a lack of proper validation o…

    WebAccess WebAccess/SCADA
  • Unscored —
    CVE-2019-10987

    In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are caused by a lack of prope…

    WebAccess WebAccess/SCADA
  • Unscored —
    CVE-2019-10989

    In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack o…

    WebAccess WebAccess/SCADA
  • Unscored —
    CVE-2019-10991

    In WebAccess/SCADA, Versions 8.3.5 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack…

    WebAccess WebAccess/SCADA
  • Unscored —
    CVE-2019-10993 EPSS 11%

    In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference vulnerabilities may allow a remote …

    WebAccess WebAccess/SCADA

Revision history

  1. #1

    ICSA-19-178-05 Advantech WebAccess/SCADA

References