Skip to content
OpenAdvisories
Critical ICSA-19-260-01 4 CVEs

Advantech WebAccess

Published Sep 17, 2019 · Updated Sep 17, 2019

Vendor: Advantech Product: WebAccess

Summary

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, access files and perform actions at a privileged level, or delete files on the system.

Vulnerabilities 4

  • Unscored —
    CVE-2019-13550

    In WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an attacker to disclose sensi…

  • Unscored —
    CVE-2019-13552

    In WebAccess versions 8.4.1 and prior, multiple command injection vulnerabilities are caused by a lack of proper valida…

  • Unscored —
    CVE-2019-13556

    In WebAccess versions 8.4.1 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of pro…

  • Unscored —
    CVE-2019-13558

    In WebAccess versions 8.4.1 and prior, an exploit executed over the network may cause improper control of generation of…

Revision history

  1. #1

    ICSA-19-260-01 Advantech WebAccess

References