ID
VAR-201907-1649
TITLE
Advantech WebAccess has remote code execution vulnerability
Trust: 0.6
DESCRIPTION
Advantech WebAccess / SCADA is a set of SCADA software based on browser architecture by Advantech. The software supports dynamic graphic display and real-time data control, and provides the ability to remotely control and manage automation equipment. Advantech WebAccess / SCADA has a remote code execution vulnerability. The vulnerability stems from the failure to verify the legality of the data provided by the user. An attacker could use this vulnerability to execute arbitrary code with Administrator permissions on a remote host
Trust: 0.72
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.8 |
AFFECTED PRODUCTS
| vendor: | advantech | model: | webaccess | scope: | eq | version: | v8.4.0 | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
TYPE
Code injection
Trust: 0.2
PATCH
| title: | Advantech WebAccess has remote code execution vulnerability | url: | https://www.cnvd.org.cn/patchinfo/show/164987 | Trust: 0.6 |
EXTERNAL IDS
| db: | CNVD | id: | CNVD-2019-21293 | Trust: 0.8 |
| db: | IVD | id: | 7C77153F-D07D-4E76-817D-B2AF337A98D6 | Trust: 0.2 |
SOURCES
| db: | IVD | id: | 7c77153f-d07d-4e76-817d-b2af337a98d6 |
| db: | CNVD | id: | CNVD-2019-21293 |
LAST UPDATE DATE
2022-05-17T01:43:06.712000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2019-21293 | date: | 2019-07-08T00:00:00 |
SOURCES RELEASE DATE
| db: | IVD | id: | 7c77153f-d07d-4e76-817d-b2af337a98d6 | date: | 2019-07-05T00:00:00 |
| db: | CNVD | id: | CNVD-2019-21293 | date: | 2019-08-04T00:00:00 |