Sign-up

ID

VAR-201601-0640


CVE

CVE-2015-3946


TITLE

Advantech WebAccess Cross-Site Request Forgery Vulnerability

Trust: 1.4

sources: IVD: 64f288be-2351-11e6-abef-000c29c66e3d // CNVD: CNVD-2016-00426 // CNNVD: CNNVD-201601-320

DESCRIPTION

Cross-site request forgery (CSRF) vulnerability in Advantech WebAccess before 8.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Advantech WebAccess Contains a cross-site request forgery vulnerability.Authentication may be hijacked by a third party. WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation equipment in facility management systems, power stations and building automation systems. Advantech WebAccess is prone to following security vulnerabilities: 1. A denial-of-service vulnerability 2. An arbitrary file-upload vulnerability 3. A directory-traversal vulnerability 4. Multiple stack-based buffer-overflow vulnerabilities 5. A heap-based buffer overflow vulnerability 6. Multiple buffer-overflow vulnerabilities 7. Multiple information disclosure vulnerabilities 8. A cross-site scripting vulnerability 9. An SQL-injection vulnerability 10. A remote-code execution vulnerability An attacker can exploit these issues to execute arbitrary code in the context of the application, cause a denial-of-service condition, upload arbitrary files, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database, to use directory-traversal sequences ('../') to retrieve arbitrary files, obtain sensitive information and perform certain unauthorized actions. This may aid in further attacks. Advantech WebAccess 8.0 and prior versions are vulnerable. Advantech WebAccess is a browser-based HMI/SCADA software developed by Advantech. A remote attacker could exploit this vulnerability to perform unauthorized operations

Trust: 2.7

sources: NVD: CVE-2015-3946 // JVNDB: JVNDB-2015-006782 // CNVD: CNVD-2016-00426 // BID: 80745 // IVD: 64f288be-2351-11e6-abef-000c29c66e3d // VULHUB: VHN-81907

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.8

sources: IVD: 64f288be-2351-11e6-abef-000c29c66e3d // CNVD: CNVD-2016-00426

AFFECTED PRODUCTS

vendor:advantechmodel:webaccessscope:ltversion:8.1

Trust: 1.4

vendor:advantechmodel:webaccessscope:lteversion:8.0

Trust: 1.0

vendor:advantechmodel:webaccessscope:eqversion:8.0

Trust: 0.6

vendor:advantechmodel:webaccessscope:eqversion:8

Trust: 0.3

vendor:advantechmodel:webaccessscope:eqversion:7.2

Trust: 0.3

vendor:advantechmodel:webaccessscope:neversion:8.1

Trust: 0.3

vendor:webaccessmodel: - scope:eqversion:*

Trust: 0.2

sources: IVD: 64f288be-2351-11e6-abef-000c29c66e3d // CNVD: CNVD-2016-00426 // BID: 80745 // JVNDB: JVNDB-2015-006782 // CNNVD: CNNVD-201601-320 // NVD: CVE-2015-3946

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2015-3946
value: HIGH

Trust: 1.0

NVD: CVE-2015-3946
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2016-00426
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201601-320
value: MEDIUM

Trust: 0.6

IVD: 64f288be-2351-11e6-abef-000c29c66e3d
value: MEDIUM

Trust: 0.2

VULHUB: VHN-81907
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2015-3946
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2016-00426
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

IVD: 64f288be-2351-11e6-abef-000c29c66e3d
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

VULHUB: VHN-81907
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2015-3946
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.0

Trust: 1.0

sources: IVD: 64f288be-2351-11e6-abef-000c29c66e3d // CNVD: CNVD-2016-00426 // VULHUB: VHN-81907 // JVNDB: JVNDB-2015-006782 // CNNVD: CNNVD-201601-320 // NVD: CVE-2015-3946

PROBLEMTYPE DATA

problemtype:CWE-352

Trust: 1.9

sources: VULHUB: VHN-81907 // JVNDB: JVNDB-2015-006782 // NVD: CVE-2015-3946

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201601-320

TYPE

cross-site request forgery

Trust: 0.6

sources: CNNVD: CNNVD-201601-320

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2015-006782

PATCH
title:Advantech WebAccessurl:http://www.advantech.com/industrial-automation/webaccess
Trust: 0.8
title:Patch for Advantech WebAccess Cross-Site Request Forgery Vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/70371
Trust: 0.6
title:Advantech WebAccess Fixes for cross-site request forgery vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=59638
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2016-00426 // 
            
            
            
            JVNDB: JVNDB-2015-006782 // 
            
            
            
            CNNVD: CNNVD-201601-320

EXTERNAL IDS
db:NVDid:CVE-2015-3946
Trust: 3.6
db:ICS CERTid:ICSA-16-014-01
Trust: 2.8
db:CNNVDid:CNNVD-201601-320
Trust: 0.9
db:CNVDid:CNVD-2016-00426
Trust: 0.8
db:JVNDBid:JVNDB-2015-006782
Trust: 0.8
db:BIDid:80745
Trust: 0.3
db:IVDid:64F288BE-2351-11E6-ABEF-000C29C66E3D
Trust: 0.2
db:VULHUBid:VHN-81907
Trust: 0.1
sources:
            
            
            IVD: 64f288be-2351-11e6-abef-000c29c66e3d // 
            
            
            
            CNVD: CNVD-2016-00426 // 
            
            
            
            VULHUB: VHN-81907 // 
            
            
            
            BID: 80745 // 
            
            
            
            JVNDB: JVNDB-2015-006782 // 
            
            
            
            CNNVD: CNNVD-201601-320 // 
            
            
            
            NVD: CVE-2015-3946

REFERENCES
url:https://ics-cert.us-cert.gov/advisories/icsa-16-014-01
Trust: 2.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-3946
Trust: 1.4
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-3946
Trust: 0.8
url:http://webaccess.advantech.com
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2016-00426 // 
            
            
            
            VULHUB: VHN-81907 // 
            
            
            
            BID: 80745 // 
            
            
            
            JVNDB: JVNDB-2015-006782 // 
            
            
            
            CNNVD: CNNVD-201601-320 // 
            
            
            
            NVD: CVE-2015-3946

CREDITS
Ilya Karpov of Positive Technologies, Ivan Sanchez, Andrea Micalizzi, Ariele Caltabiano, Fritz Sands, Steven Seeley, and an anonymous researcher
Trust: 0.3
sources:
            
            
            BID: 80745

SOURCES
db:IVDid:64f288be-2351-11e6-abef-000c29c66e3d
db:CNVDid:CNVD-2016-00426
db:VULHUBid:VHN-81907
db:BIDid:80745
db:JVNDBid:JVNDB-2015-006782
db:CNNVDid:CNNVD-201601-320
db:NVDid:CVE-2015-3946

LAST UPDATE DATE
2024-08-14T13:33:08.744000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2016-00426date:2016-01-25T00:00:00
db:VULHUBid:VHN-81907date:2016-01-18T00:00:00
db:BIDid:80745date:2016-01-14T00:00:00
db:JVNDBid:JVNDB-2015-006782date:2016-01-19T00:00:00
db:CNNVDid:CNNVD-201601-320date:2016-01-18T00:00:00
db:NVDid:CVE-2015-3946date:2016-01-18T13:42:28.853

SOURCES RELEASE DATE
db:IVDid:64f288be-2351-11e6-abef-000c29c66e3ddate:2016-01-25T00:00:00
db:CNVDid:CNVD-2016-00426date:2016-01-25T00:00:00
db:VULHUBid:VHN-81907date:2016-01-15T00:00:00
db:BIDid:80745date:2016-01-14T00:00:00
db:JVNDBid:JVNDB-2015-006782date:2016-01-19T00:00:00
db:CNNVDid:CNNVD-201601-320date:2016-01-18T00:00:00
db:NVDid:CVE-2015-3946date:2016-01-15T03:59:01.433