Details of VAR-202004-0077

ID

VAR-202004-0077

CVE

CVE-2020-10617

TITLE

Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability

Trust: 8.4

sources: ZDI: ZDI-20-438 // ZDI: ZDI-20-439 // ZDI: ZDI-20-395 // ZDI: ZDI-20-416 // ZDI: ZDI-20-396 // ZDI: ZDI-20-423 // ZDI: ZDI-20-403 // ZDI: ZDI-20-433 // ZDI: ZDI-20-408 // ZDI: ZDI-20-418 // ZDI: ZDI-20-435 // ZDI: ZDI-20-428

DESCRIPTION

There are multiple ways an unauthenticated attacker could perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access to sensitive information. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability.The specific flaw exists within the processing of calls to the getSeverByAlarm method of the DBUtil class. When parsing the events parameter of the emsEvents endpoint, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose files in the context of SYSTEM

Trust: 12.87

sources: NVD: CVE-2020-10617 // ZDI: ZDI-20-374 // ZDI: ZDI-20-428 // ZDI: ZDI-20-388 // ZDI: ZDI-20-435 // ZDI: ZDI-20-418 // ZDI: ZDI-20-408 // ZDI: ZDI-20-378 // ZDI: ZDI-20-433 // ZDI: ZDI-20-403 // ZDI: ZDI-20-438 // ZDI: ZDI-20-443 // ZDI: ZDI-20-393 // ZDI: ZDI-20-423 // ZDI: ZDI-20-396 // ZDI: ZDI-20-416 // ZDI: ZDI-20-395 // ZDI: ZDI-20-439 // ZDI: ZDI-20-412 // ZDI: ZDI-20-445

AFFECTED PRODUCTS

vendor:	advantech	model:	webaccess/nms	scope:	-	version:	-	Trust: 13.3
vendor:	advantech	model:	webaccess\/nms	scope:	lt	version:	3.0.2	Trust: 1.0

sources: ZDI: ZDI-20-438 // ZDI: ZDI-20-374 // ZDI: ZDI-20-412 // ZDI: ZDI-20-439 // ZDI: ZDI-20-395 // ZDI: ZDI-20-416 // ZDI: ZDI-20-396 // ZDI: ZDI-20-423 // ZDI: ZDI-20-393 // ZDI: ZDI-20-443 // ZDI: ZDI-20-445 // ZDI: ZDI-20-403 // ZDI: ZDI-20-433 // ZDI: ZDI-20-378 // ZDI: ZDI-20-408 // ZDI: ZDI-20-418 // ZDI: ZDI-20-435 // ZDI: ZDI-20-388 // ZDI: ZDI-20-428 // NVD: CVE-2020-10617

CVSS

SEVERITY

CVSSV2

CVSSV3

ZDI:	CVE-2020-10617
value:	HIGH
Trust: 13.3
nvd@nist.gov:	CVE-2020-10617
value:	HIGH
Trust: 1.0

nvd@nist.gov:	CVE-2020-10617
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0

ZDI:	CVE-2020-10617
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.0
Trust: 13.3
nvd@nist.gov:	CVE-2020-10617
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.1
Trust: 1.0

PROBLEMTYPE DATA

problemtype:

CWE-89

Trust: 1.0

sources: NVD: CVE-2020-10617

PATCH

title:

Advantech has issued an update to correct this vulnerability.

url:

https://www.us-cert.gov/ics/advisories/icsa-20-098-01

Trust: 13.3

EXTERNAL IDS

db:	NVD	id:	CVE-2020-10617	Trust: 14.3
db:	ICS CERT	id:	ICSA-20-098-01	Trust: 1.0
db:	ZDI_CAN	id:	ZDI-CAN-9820	Trust: 0.7
db:	ZDI	id:	ZDI-20-438	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9567	Trust: 0.7
db:	ZDI	id:	ZDI-20-374	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9765	Trust: 0.7
db:	ZDI	id:	ZDI-20-412	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9821	Trust: 0.7
db:	ZDI	id:	ZDI-20-439	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9589	Trust: 0.7
db:	ZDI	id:	ZDI-20-395	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9776	Trust: 0.7
db:	ZDI	id:	ZDI-20-416	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9601	Trust: 0.7
db:	ZDI	id:	ZDI-20-396	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9802	Trust: 0.7
db:	ZDI	id:	ZDI-20-423	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9587	Trust: 0.7
db:	ZDI	id:	ZDI-20-393	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9825	Trust: 0.7
db:	ZDI	id:	ZDI-20-443	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9827	Trust: 0.7
db:	ZDI	id:	ZDI-20-445	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9628	Trust: 0.7
db:	ZDI	id:	ZDI-20-403	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9815	Trust: 0.7
db:	ZDI	id:	ZDI-20-433	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9571	Trust: 0.7
db:	ZDI	id:	ZDI-20-378	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9700	Trust: 0.7
db:	ZDI	id:	ZDI-20-408	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9778	Trust: 0.7
db:	ZDI	id:	ZDI-20-418	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9817	Trust: 0.7
db:	ZDI	id:	ZDI-20-435	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9581	Trust: 0.7
db:	ZDI	id:	ZDI-20-388	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-9807	Trust: 0.7
db:	ZDI	id:	ZDI-20-428	Trust: 0.7

REFERENCES

url:

https://www.us-cert.gov/ics/advisories/icsa-20-098-01

Trust: 14.3

CREDITS

rgod of 9sg

Trust: 13.3

SOURCES

db:	ZDI	id:	ZDI-20-438
db:	ZDI	id:	ZDI-20-374
db:	ZDI	id:	ZDI-20-412
db:	ZDI	id:	ZDI-20-439
db:	ZDI	id:	ZDI-20-395
db:	ZDI	id:	ZDI-20-416
db:	ZDI	id:	ZDI-20-396
db:	ZDI	id:	ZDI-20-423
db:	ZDI	id:	ZDI-20-393
db:	ZDI	id:	ZDI-20-443
db:	ZDI	id:	ZDI-20-445
db:	ZDI	id:	ZDI-20-403
db:	ZDI	id:	ZDI-20-433
db:	ZDI	id:	ZDI-20-378
db:	ZDI	id:	ZDI-20-408
db:	ZDI	id:	ZDI-20-418
db:	ZDI	id:	ZDI-20-435
db:	ZDI	id:	ZDI-20-388
db:	ZDI	id:	ZDI-20-428
db:	NVD	id:	CVE-2020-10617

LAST UPDATE DATE

2026-02-07T23:32:18.374000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-20-438	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-374	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-412	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-439	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-395	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-416	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-396	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-423	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-393	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-443	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-445	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-403	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-433	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-378	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-408	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-418	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-435	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-388	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-428	date:	2020-04-08T00:00:00
db:	NVD	id:	CVE-2020-10617	date:	2024-11-21T04:55:42.477

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-20-438	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-374	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-412	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-439	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-395	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-416	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-396	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-423	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-393	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-443	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-445	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-403	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-433	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-378	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-408	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-418	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-435	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-388	date:	2020-04-08T00:00:00
db:	ZDI	id:	ZDI-20-428	date:	2020-04-08T00:00:00
db:	NVD	id:	CVE-2020-10617	date:	2020-04-09T14:15:12.510