CVE-2019-3975

Advantech WebAccess/SCADA 8.4.1 is affected by CVE-2019-3975 due to a stack-based buffer overflow in the webvprcs/IOCTL 70603 RPC handling, enabling a remote, unauthenticated attacker to execute arbitrary code. This is confirmed across multiple sources (Red Hat advisory, CNVD, NVD entry) with imp...

Advantech WebAccess/SCADA Buffer Overflow Vulnerability (CNVD-2019-32464)

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. A buffer overflow vulnerability exists ...

Memory Corruption Vulnerability in Advantech WebAccess HMI Designer

Advantech WebAccess HMI Designer is software that creates complete solutions for all HMI products and HMI applications including the TPC/WebOP/UNO series. A memory corruption vulnerability exists in Advantech WebAccess HMI Designer, which can be exploited by an attacker to execute malicious code ...

Advantech WebAccess HMI Designer suffers from dll hijacking vulnerability

Advantech WebAccess HMI Designer is software that creates complete solutions for all HMI products and HMI applications including the TPC/WebOP/UNO series. Advantech WebAccess HMI Designer suffers from a dll hijacking vulnerability that can be exploited by an attacker to load a malicious dll and...

Advantech WebAccess HMI Designer MCR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

CVE-2019-10961

In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, allowing remote code execution...

Advantech WebAccess HMI Designer Out-of-Bounds Write Vulnerability

Advantech WebAccess HMI Designer is a human machine interface HMI runtime development software. An out-of-bounds write vulnerability exists in Advantech WebAccess HMI Designer version 2.1.9.23 and earlier versions, which can be exploited by a remote attacker to execute arbitrary code via a...

Remote Code Execution Vulnerability in Advantech WebAccess

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. A remote code execution vulnerability exists in Advantech WebAccess, which can be exploited by an attacker to obtain server information and privileges...

Advantech WebAccess Exploits Arbitrary File Deletion Vulnerability

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. An arbitrary file deletion vulnerability exists in Advantech WebAccess, which can be exploited by an attacker to delete arbitrary files...

Advantech WebAccess/SCADA Buffer Overflow Vulnerability (CNVD-2019-32477)

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. A buffer overflow vulnerability exists ...

Advantech WebAccess/SCADA Out-of-Bounds Write Vulnerability

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. An out-of-bounds write vulnerability...

Advantech WebAccess/SCADA Path Traversal Vulnerability

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. A path traversal vulnerability exists i...

Advantech WebAccess Client bwclient Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Client. Authentication is not required to exploit this vulnerability. The specific flaw exists within bwclient.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs...

Advantech WebAccess Node viewsrv SQLPrepare Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x27E5 IOCTL in the webvrpcs process. The issue resul...

Advantech WebAccess Node viewsrv Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within viewsrv.dll, which is accessed through the 0x2722 IOCTL in the webvrpcs...

Advantech WebAccess Node viewsrv SQLSetConnectOption Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x27DE IOCTL in the webvrpcs process. The issue resul...

Advantech WebAccess Node viewsrv SQLDescribeParam Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x27E8 IOCTL in the webvrpcs process. The issue resul...

Advantech WebAccess Node viewsrv SQLFreeConnect Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x27DB IOCTL in the webvrpcs process. The issue resul...

Advantech WebAccess Node viewsrv findClose Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x2776 IOCTL in the webvrpcs process. The issue resul...

Advantech WebAccess Node BwPAlarm Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x113cd IOCTL in the webvrpcs process. The issue...