Advantech WebAccess Vulnerabilities

🗓️ 21 Dec 2014 07:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 41 Views

Advantech WebAccess Vulnerabilities advisory regarding SQL injection and stack buffer overflow, allowing remote arbitrary code execution and access to stored files

Reporter	Title	Published	Views	Family All 61
Tenable Nessus	Advantech WebAccess < 7.2-2013.11.14 Multiple Vulnerabilities	14 Feb 201700:00	–	nessus
Tenable Nessus	Advantech WebAccess < 7.2-2013.11.14 Multiple Vulnerabilities	17 Aug 201500:00	–	nessus
Tenable Nessus	Advantech WebAccess webvact ActiveX Multiple Buffer Overflow Vulnerabilities	14 Apr 201400:00	–	nessus
Circl	CVE-2014-0763	29 May 201815:50	–	circl
Circl	CVE-2014-0764	19 Sep 202519:48	–	circl
Circl	CVE-2014-0765	19 Sep 202519:48	–	circl
Circl	CVE-2014-0766	19 Sep 202519:48	–	circl
Circl	CVE-2014-0767	19 Sep 202519:48	–	circl
Circl	CVE-2014-0768	19 Sep 202519:48	–	circl
Check Point Advisories	Advantech WebAccess SCADA webvact.ocx NodeName Buffer Overflow (CVE-2014-0764)	13 May 201400:00	–	checkpoint_advisories

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2014/icsa-14-079-03.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-14-079-03
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

21 Dec 2014 07:00Current

7.8High risk

Vulners AI Score7.8

CVSS 27.5

EPSS0.57891