Description
There are multiple ways an unauthenticated attacker could perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access to sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WebAccess/NMS | Versions prior to 3.0.2 | — |
Advisories 1
- ICSA-20-098-01 Advantech WebAccess/NMS CISA ICS & IT advisories · Apr 7, 2020