CVE-2011-4525

2012-02-2113:31:56

CWE-264

[email protected]

web.nvd.nist.gov

advantech

broadwin webaccess

cve-2011-4525

security vulnerability

web content extraction

batch file

remote attack

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.4%

JSON

Advantech/BroadWin WebAccess before 7.0 allows remote attackers to trigger the extraction of arbitrary web content into a batch file on a client system, and execute this batch file, via unspecified vectors.

Affected configurations

NVD

Node

advantechadvantech_webaccessRange≤6.0

advantechadvantech_webaccessMatch5.0

CPENameOperatorVersion
advantech:advantech_webaccessadvantech advantech webaccessle6.0
advantech:advantech_webaccessadvantech advantech webaccesseq5.0