Summary
Successful exploitation of this vulnerability could allow an attacker to access project names and paths.
Vulnerabilities 1
-
Medium 4.3
Advantech WebAccess SCADA
An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users.
Revision history
-
#1
ICSA-21-285-01 Advantech WebAccess SCADA
References
-
ICS Advisory ICSA-21-285-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-285-01
-
Recommended Practices
https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B