Advantech WebAccess/SCADA

🗓️ 27 Jun 2019 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 27 Views

Advantech WebAccess/SCADA v8.3.5 and prior affected by remote code execution vulnerabilitie

Reporter	Title	Published	Views	Family All 91
BDU FSTEC	The numerous vulnerabilities of the Webvrpcs software, a remote monitoring solution from Advantech, allow a intruder to execute arbitrary code.	29 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The numerous vulnerabilities of the Webvrpcs software, a remote monitoring solution from Advantech, allow a intruder to execute arbitrary code.	29 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The numerous vulnerabilities of the Webvrpcs software, a remote monitoring solution from Advantech, allow a intruder to execute arbitrary code.	29 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The numerous vulnerabilities of the Webvrpcs software, a remote monitoring solution from Advantech, allow a intruder to execute arbitrary code.	29 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Webvrpcs software for remote monitoring from Advantech WebAccess allows a intruder to delete files.	29 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the viewsrv.dll library in the webvrpcs software of the Advantech WebAccess monitoring system allows a hacker to read data beyond the buffer in memory.	29 Oct 201900:00	–	bdu_fstec
CNVD	Advantech WebAccess/SCADA Buffer Overflow Vulnerability (CNVD-2019-32464)	23 Aug 201900:00	–	cnvd
CNVD	Advantech WebAccess/SCADA Out-of-Bounds Write Vulnerability	8 Jul 201900:00	–	cnvd
CNVD	Advantech WebAccess/SCADA Buffer Overflow Vulnerability (CNVD-2019-32472)	2 Jul 201900:00	–	cnvd
CNVD	Advantech WebAccess/SCADA Arbitrary Code Execution Vulnerability	2 Jul 201900:00	–	cnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsa-19-178-05.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-19-178-05
us-cert	www.us-cert.gov/cas/tips/ST04-014.html
us-cert	www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
ics-cert	www.ics-cert.us-cert.gov/tips/ICS-TIP-12-146-01B

27 Jun 2019 00:00Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 3.19.8

EPSS0.10665

advantech webaccess/scada remote code execution path traversal stack-based buffer overflow heap-based buffer overflow out-of-bounds read untrusted pointer dereference critical infrastructure sectors version 8.4.1 nccic.