Skip to content
OpenAdvisories
Critical ICSA-20-128-01 8 CVEs

Advantech WebAccess Node

Published May 7, 2020 · Updated May 7, 2020

Vendor: Advantech Product: WebAccess Node

Summary

Successful exploitation of these vulnerabilities may allow information disclosure, remote code execution, and compromise system availability.

Vulnerabilities 8

  • Unscored —
    CVE-2020-10638

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple heap-based buffer overflow vulnerabilities e…

  • Unscored —
    CVE-2020-12002

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple stack-based buffer overflow vulnerabilities …

  • Unscored —
    CVE-2020-12006

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exis…

  • Unscored —
    CVE-2020-12010

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exis…

  • Unscored —
    CVE-2020-12014

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Input is not properly sanitized and may allow an atta…

  • Unscored —
    CVE-2020-12018

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability exists that may allow …

  • Unscored —
    CVE-2020-12022

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An improper validation vulnerability exists that coul…

  • Unscored —
    CVE-2020-12026

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exis…

Revision history

  1. #1

    ICSA-20-128-01 Advantech WebAccess Node

References