Skip to content
OpenAdvisories
Critical ICSA-19-304-01 4 CVEs

Advantech WISE-PaaS/RMM

Published Oct 31, 2019 · Updated Oct 31, 2019

Vendor: Advantech Product: WISE-PaaS/RMM

Summary

Successful exploitation of these vulnerabilities may allow information disclosure, remote code execution, and compromise system availability.

Vulnerabilities 4

  • Unscored —
    CVE-2019-13547

    Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. There is an unsecured function that allows anyone who can access th…

  • Unscored —
    CVE-2019-13551

    Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper valid…

  • Unscored —
    CVE-2019-18227

    Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive da…

  • Unscored —
    CVE-2019-18229

    Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Lack of sanitization of user-supplied input cause SQL injection vul…

Revision history

  1. #1

    ICSA-19-304-01 Advantech WISE-PaaS/RMM

References