Unscored CVE-2019-6552 EUVD-2019-16111GHSA-8277-67w7-4h2q

Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple command injection vulnerabilities, caused by a lack of proper validation of u…

Published Apr 5, 2019 · Updated Aug 4, 2024 · Assigned by icscert

Vendor: Advantech Product: WebAccess/SCADA

Description

Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple command injection vulnerabilities, caused by a lack of proper validation of user-supplied data, may allow remote code execution.

Affected products

Vendor	Product	Affected	Fixed
Advantech	WebAccess/SCADA	Versions 8.3.5 and prior.	—

Advisories 1

ICSA-19-092-01 Advantech WebAccess/SCADA CISA ICS & IT advisories · Apr 2, 2019

References

https://ics-cert.us-cert.gov/advisories/ICSA-19-092-01