Unscored CVE-2021-38408 EUVD-2021-24860GHSA-pc3j-ph7x-cxh4

A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper validation of the len…

Published Sep 9, 2021 · Updated Aug 4, 2024 · Assigned by icscert

Description

A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper validation of the length of user-supplied data may allow remote code execution.

Affected products

Vendor	Product	Affected	Fixed
—	Advantech WebAccess	WebAccess: Versions 9.02 and prior	—

Advisories 1

ICSA-21-245-03 Advantech WebAccess CISA ICS & IT advisories · Sep 2, 2021

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-245-03