Sign-up

ID

VAR-201601-0641


CVE

CVE-2015-3947


TITLE

Advantech WebAccess In SQL Injection vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2015-006783

DESCRIPTION

SQL injection vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation equipment in facility management systems, power stations and building automation systems. Advantech WebAccess is prone to following security vulnerabilities: 1. A denial-of-service vulnerability 2. An arbitrary file-upload vulnerability 3. A directory-traversal vulnerability 4. Multiple stack-based buffer-overflow vulnerabilities 5. A heap-based buffer overflow vulnerability 6. Multiple buffer-overflow vulnerabilities 7. Multiple information disclosure vulnerabilities 8. A cross-site scripting vulnerability 9. An SQL-injection vulnerability 10. A cross-site request forgery vulnerability 11. A remote-code execution vulnerability An attacker can exploit these issues to execute arbitrary code in the context of the application, cause a denial-of-service condition, upload arbitrary files, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database, to use directory-traversal sequences ('../') to retrieve arbitrary files, obtain sensitive information and perform certain unauthorized actions. This may aid in further attacks. Advantech WebAccess 8.0 and prior versions are vulnerable. Advantech WebAccess is a browser-based HMI/SCADA software developed by Advantech

Trust: 2.7

sources: NVD: CVE-2015-3947 // JVNDB: JVNDB-2015-006783 // CNVD: CNVD-2016-00425 // BID: 80745 // IVD: 64e47f1c-2351-11e6-abef-000c29c66e3d // VULHUB: VHN-81908

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.8

sources: IVD: 64e47f1c-2351-11e6-abef-000c29c66e3d // CNVD: CNVD-2016-00425

AFFECTED PRODUCTS

vendor:advantechmodel:webaccessscope:ltversion:8.1

Trust: 1.4

vendor:advantechmodel:webaccessscope:lteversion:8.0

Trust: 1.0

vendor:advantechmodel:webaccessscope:eqversion:8.0

Trust: 0.6

vendor:advantechmodel:webaccessscope:eqversion:8

Trust: 0.3

vendor:advantechmodel:webaccessscope:eqversion:7.2

Trust: 0.3

vendor:advantechmodel:webaccessscope:neversion:8.1

Trust: 0.3

vendor:webaccessmodel: - scope:eqversion:*

Trust: 0.2

sources: IVD: 64e47f1c-2351-11e6-abef-000c29c66e3d // CNVD: CNVD-2016-00425 // BID: 80745 // JVNDB: JVNDB-2015-006783 // CNNVD: CNNVD-201601-321 // NVD: CVE-2015-3947

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2015-3947
value: HIGH

Trust: 1.0

NVD: CVE-2015-3947
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2016-00425
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201601-321
value: MEDIUM

Trust: 0.6

IVD: 64e47f1c-2351-11e6-abef-000c29c66e3d
value: MEDIUM

Trust: 0.2

VULHUB: VHN-81908
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2015-3947
severity: MEDIUM
baseScore: 6.5
vectorString: AV:N/AC:L/AU:S/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2016-00425
severity: MEDIUM
baseScore: 6.5
vectorString: AV:N/AC:L/AU:S/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

IVD: 64e47f1c-2351-11e6-abef-000c29c66e3d
severity: MEDIUM
baseScore: 6.5
vectorString: AV:N/AC:L/AU:S/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

VULHUB: VHN-81908
severity: MEDIUM
baseScore: 6.5
vectorString: AV:N/AC:L/AU:S/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2015-3947
baseSeverity: HIGH
baseScore: 8.1
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
exploitabilityScore: 2.8
impactScore: 5.2
version: 3.0

Trust: 1.0

sources: IVD: 64e47f1c-2351-11e6-abef-000c29c66e3d // CNVD: CNVD-2016-00425 // VULHUB: VHN-81908 // JVNDB: JVNDB-2015-006783 // CNNVD: CNNVD-201601-321 // NVD: CVE-2015-3947

PROBLEMTYPE DATA

problemtype:CWE-89

Trust: 1.9

sources: VULHUB: VHN-81908 // JVNDB: JVNDB-2015-006783 // NVD: CVE-2015-3947

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201601-321

TYPE

SQL injection

Trust: 0.8

sources: IVD: 64e47f1c-2351-11e6-abef-000c29c66e3d // CNNVD: CNNVD-201601-321

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2015-006783

PATCH
title:Advantech WebAccessurl:http://www.advantech.com/industrial-automation/webaccess
Trust: 0.8
title:Patch for Advantech WebAccess SQL Injection Vulnerability (CNVD-2016-00425)url:https://www.cnvd.org.cn/patchInfo/show/70369
Trust: 0.6
title:Advantech WebAccess SQL Repair measures for injecting vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=59639
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2016-00425 // 
            
            
            
            JVNDB: JVNDB-2015-006783 // 
            
            
            
            CNNVD: CNNVD-201601-321

EXTERNAL IDS
db:NVDid:CVE-2015-3947
Trust: 3.6
db:ICS CERTid:ICSA-16-014-01
Trust: 2.8
db:CNNVDid:CNNVD-201601-321
Trust: 0.9
db:CNVDid:CNVD-2016-00425
Trust: 0.8
db:JVNDBid:JVNDB-2015-006783
Trust: 0.8
db:BIDid:80745
Trust: 0.3
db:IVDid:64E47F1C-2351-11E6-ABEF-000C29C66E3D
Trust: 0.2
db:VULHUBid:VHN-81908
Trust: 0.1
sources:
            
            
            IVD: 64e47f1c-2351-11e6-abef-000c29c66e3d // 
            
            
            
            CNVD: CNVD-2016-00425 // 
            
            
            
            VULHUB: VHN-81908 // 
            
            
            
            BID: 80745 // 
            
            
            
            JVNDB: JVNDB-2015-006783 // 
            
            
            
            CNNVD: CNNVD-201601-321 // 
            
            
            
            NVD: CVE-2015-3947

REFERENCES
url:https://ics-cert.us-cert.gov/advisories/icsa-16-014-01
Trust: 2.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-3947
Trust: 1.4
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-3947
Trust: 0.8
url:http://webaccess.advantech.com
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2016-00425 // 
            
            
            
            VULHUB: VHN-81908 // 
            
            
            
            BID: 80745 // 
            
            
            
            JVNDB: JVNDB-2015-006783 // 
            
            
            
            CNNVD: CNNVD-201601-321 // 
            
            
            
            NVD: CVE-2015-3947

CREDITS
Ilya Karpov of Positive Technologies, Ivan Sanchez, Andrea Micalizzi, Ariele Caltabiano, Fritz Sands, Steven Seeley, and an anonymous researcher
Trust: 0.3
sources:
            
            
            BID: 80745

SOURCES
db:IVDid:64e47f1c-2351-11e6-abef-000c29c66e3d
db:CNVDid:CNVD-2016-00425
db:VULHUBid:VHN-81908
db:BIDid:80745
db:JVNDBid:JVNDB-2015-006783
db:CNNVDid:CNNVD-201601-321
db:NVDid:CVE-2015-3947

LAST UPDATE DATE
2024-08-14T13:33:08.832000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2016-00425date:2016-01-30T00:00:00
db:VULHUBid:VHN-81908date:2016-01-18T00:00:00
db:BIDid:80745date:2016-01-14T00:00:00
db:JVNDBid:JVNDB-2015-006783date:2016-01-19T00:00:00
db:CNNVDid:CNNVD-201601-321date:2016-01-18T00:00:00
db:NVDid:CVE-2015-3947date:2016-01-18T14:02:53.133

SOURCES RELEASE DATE
db:IVDid:64e47f1c-2351-11e6-abef-000c29c66e3ddate:2016-01-25T00:00:00
db:CNVDid:CNVD-2016-00425date:2016-01-25T00:00:00
db:VULHUBid:VHN-81908date:2016-01-15T00:00:00
db:BIDid:80745date:2016-01-14T00:00:00
db:JVNDBid:JVNDB-2015-006783date:2016-01-19T00:00:00
db:CNNVDid:CNNVD-201601-321date:2016-01-18T00:00:00
db:NVDid:CVE-2015-3947date:2016-01-15T03:59:02.497