Skip to content
OpenAdvisories
Critical ICSA-21-285-02 2 CVEs

Advantech WebAccess

Published Oct 12, 2021 · Updated Oct 12, 2021

Vendor: Advantech Product: WebAccess

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain remote code execution.

Vulnerabilities 2

  • Critical 9.8
    CVE-2021-33023

    Advantech WebAccess

    Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code.

    Advantech WebAccess
  • Critical 9.8
    CVE-2021-38389 EPSS 10%

    Advantech WebAccess

    Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code.

    Advantech WebAccess

Revision history

  1. #1

    ICSA-21-285-02 Advantech WebAccess

References