Lucene search
CertccCVE-2012-0240HistoryFeb 21, 2012 - 1:31 p.m.
CVE-2012-0240
2012-02-2113:31:57
CWE-287
certcc
web.nvd.nist.gov
31
cve
2012
0240
advantech
broadwin
webaccess
gbscriptaddup.asp
authentication bypass
remote code execution
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
Low
EPSS
0.026
Percentile
90.3%
GbScriptAddUp.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to execute arbitrary code via unspecified vectors.
Affected configurations
Node
advantechadvantech_webaccessRange≤6.0
ORadvantechadvantech_webaccessMatch5.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| advantech | advantech_webaccess | * | cpe:2.3:a:advantech:advantech_webaccess:*:*:*:*:*:*:*:* |
| advantech | advantech_webaccess | 5.0 | cpe:2.3:a:advantech:advantech_webaccess:5.0:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2012-0240
2012-02-21 11:00:00
prion
prion
Authentication flaw
2012-02-21 13:31:00
nvd
nvd
CVE-2012-0240
2012-02-21 13:31:57
nessus
nessus
Advantech WebAccess < 7.0-2009.06.29 Multiple Vulnerabilities
2017-02-14 00:00:00
Advantech WebAccess < 7.0-2009.06.29 Multiple Vulnerabilities
2015-08-28 00:00:00
ics
ics
Advantech WebAccess Vulnerabilities (UPDATE A)
2018-08-27 12:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
Low
EPSS
0.026
Percentile
90.3%
Related for CVE-2012-0240