Skip to content
OpenAdvisories
Unscored CVE-2019-3951 EUVD-2019-13558GHSA-2m64-whjh-g4f5

Advantech WebAccess before 8.4.3 allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service (memory cor…

Published Dec 12, 2019 · Updated Aug 4, 2024 · Assigned by tenable

Description

Advantech WebAccess before 8.4.3 allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service (memory corruption) due to a stack-based buffer overflow when handling IOCTL 70533 RPC messages.

Affected products

VendorProductAffectedFixed
— Advantech WebAccess/SCADA 8.4.2. —

References