Multiple Advantech products have security vulnerabilities

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A local elevation of privilege...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Advantech Webaccess

This is a proof-of-concept PoC exploit for a vulnerability in the bwconn.dll library, which is a Windows RPC client library. The vulnerability is identified as CVE-2016-0856. The PoC exploit is written in Python and uses the ctypes library to interact with the bwconn.dll library. The exploit...

Advantech WebAccess Info Disclosure

The vulnerability of Advantech WebAccess remote monitoring software is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

Advantech WebAccess/SCADA WADashboard External Control of File Path Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/SCADA. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the WADashboard...

Advantech WebAccess/SCADA Path Operation Code Execution Vulnerability

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. A security vulnerability exists in the operation of the Advantech WebAccess/SCADA path, which could be exploited by a remote attacker to submit a specific request that could be used in the context of the...

Advantech WebAccess/SCADA suffers from arbitrary file deletion vulnerability (CNVD-2020-58467)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA. An attacker can exploit the vulnerability to delete arbitrary files...

Advantech WebAccess/SCADA suffers from an arbitrary file deletion vulnerability (CNVD-2020-58466)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA. An attacker can exploit the vulnerability to delete arbitrary files...

Advantech WebAccess/SCADA suffers from an arbitrary file deletion vulnerability (CNVD-2020-58465)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA. An attacker can exploit the vulnerability to delete arbitrary files...

Advantech WebAccess/SCADA suffers from a command execution vulnerability (CNVD-2020-58468)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. A command execution vulnerability exists in Advantech WebAccess/SCADA. An attacker could exploit the vulnerability to execute console commands...

Advantech WebAccess/SCADA suffers from arbitrary file deletion vulnerability (CNVD-2020-58463)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA. An attacker can exploit the vulnerability to delete arbitrary files...

Binary Vulnerability in Advantech WebAccess HMI PanelSim.exe

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. A binary vulnerability exists in Advantech WebAccess HMI PanelSim.exe, which can be exploited by attackers to cause a denial of service on the server...

Heap Overflow Vulnerability in Advantech WebAccess HMI PanelSim.exe

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. A heap overflow vulnerability exists in Advantech WebAccess HMI PanelSim.exe, which can be exploited by an attacker to cause a heap overflow and cause the program to crash...

Advantech WebAccess HMI Designer suffers from dll Hijacking Vulnerability

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. Advantech WebAccess HMI Designer suffers from a dll hijacking vulnerability that can be exploited by attackers to gain administrator privileges...

Advantech WebAccess HMI PanelSim.exe suffers from a stack overflow vulnerability (CNVD-2020-61115)

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. A stack overflow vulnerability exists in Advantech WebAccess HMI PanelSim.exe, which can be exploited by an attacker to cause a denial of service on the server...

Advantech WebAccess HMI Runtime suffers from stack overflow vulnerability (CNVD-2020-61110)

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. A stack overflow vulnerability exists in Advantech WebAccess HMI Runtime, which can be exploited by an attacker to cause a denial of service on the server...

Integer Overflow Vulnerability in Advantech WebAccess HMI Runtime (CNVD-2020-61109)

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. An integer overflow vulnerability exists in Advantech WebAccess HMI Runtime, which can be exploited by an attacker to cause a denial of service on the server. The vulnerability can be exploited by an...

Integer Overflow Vulnerability in Advantech WebAccess HMI PanelSim.exe

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. An integer overflow vulnerability exists in Advantech WebAccess HMI PanelSim.exe, which can be exploited by an attacker to cause an integer overflow, resulting in a program crash...

Heap Overflow Vulnerability in Advantech WebAccess HMI Runtime (CNVD-2020-61112)

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. A heap overflow vulnerability exists in Advantech WebAccess HMI Runtime, which can be exploited by an attacker to cause a denial of service on the server...

Binary Vulnerability in Advantech WebAccess HMI Runtime (CNVD-2020-61111)

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. A binary vulnerability exists in Advantech WebAccess HMI Runtime, which can be exploited by attackers to cause a denial of service to the server...

Advantech WebAccess Node Critical Resource Permission Assignment Incorrect Vulnerability

The Advantech WebAccess Node is an HMI Human Machine Interaction platform. A security vulnerability exists in Advantech WebAccess Node versions prior to 9.0.1. An attacker can exploit the vulnerability to execute code with system privileges...