Description
A SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. By submitting a specially crafted parameter, it is possible to inject arbitrary SQL statements that could allow an attacker to obtain sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Advantech WebAccess | Advantech WebAccess | — |
Advisories 1
- ICSA-17-241-02 Advantech WebAccess CISA ICS & IT advisories · Aug 29, 2017