Skip to content
OpenAdvisories
Critical ICSA-23-166-02 1 CVE

Advantech WebAccess/SCADA

Published Jun 15, 2023 · Updated Jun 15, 2023

Vendor: Advantech Product: WebAccess/SCADA

Summary

Successful exploitation of this vulnerability could lead to an attacker gaining remote file system access and the achieving remote command execution.

Vulnerabilities 1

  • Critical 9.8
    CVE-2023-1437

    CVE-2023-1437

    All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent could contain raw memory pointers for the server to use as-is. This could allow an attacker to gain access to the remote fi…

    Advantech WebAccess/SCADA

Revision history

  1. #1

    Initial Publication

References