Code injection

2012-02-2113:31:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.4%

JSON

Advantech/BroadWin WebAccess before 7.0 allows remote attackers to trigger the extraction of arbitrary web content into a batch file on a client system, and execute this batch file, via unspecified vectors.

CPENameOperatorVersion
advantech_webaccessle6.0
advantech_webaccesseq5.0

CPE	Name	Operator	Version
	advantech_webaccess	le	6.0
	advantech_webaccess	eq	5.0

References

www.securityfocus.com/bid/52051

www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf