Advantech WebAccess Vulnerabilities

🗓️ 19 Nov 2012 07:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 49 Views

Advantech WebAccess vulnerabilities, including XSS, SQL injection, CSRF, and authentication issues have been reported. New version available for patching

Reporter	Title	Published	Views	Family All 42
Tenable Nessus	Advantech WebAccess < 7.0-2009.06.29 Multiple Vulnerabilities	14 Feb 201700:00	–	nessus
Tenable Nessus	Advantech WebAccess < 7.0-2009.06.29 Multiple Vulnerabilities	28 Aug 201500:00	–	nessus
Check Point Advisories	Advantech WebAccess HMI and SCADA Software CrossSite Scripting - Ver2 (CVE-2012-0233)	28 Dec 201400:00	–	checkpoint_advisories
CVE	CVE-2012-0233	21 Feb 201211:00	–	cve
CVE	CVE-2012-0234	21 Feb 201211:00	–	cve
CVE	CVE-2012-0235	21 Feb 201211:00	–	cve
CVE	CVE-2012-0236	21 Feb 201211:00	–	cve
CVE	CVE-2012-0237	21 Feb 201211:00	–	cve
CVE	CVE-2012-0238	21 Feb 201211:00	–	cve
CVE	CVE-2012-0239	21 Feb 201211:00	–	cve

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2012/icsa-12-047-01a.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-12-047-01a
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

19 Nov 2012 07:00Current

8.5High risk

Vulners AI Score8.5

CVSS 210

EPSS0.031