CVE-2021-38408

CVE-2021-38408 affects Advantech WebAccess (versions 9.02 and earlier). The vulnerability is a stack-based buffer overflow caused by improper validation of the length of user-supplied data, potentially enabling remote code execution. Public documentation consistently describes impact as remote co...

CVE-2021-38408

A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper validation of the length of user-supplied data may allow remote code execution...

CVE-2021-38408: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper validation of the length of user-supplied data may allow remote code execution...

PT-2021-4647

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 9.02 and prior Description The issue is caused by a stack-based buffer overflow vulnerability due to a lack of proper validation of the length of user-supplied data. This may allow a remote attacker to execute...

Advantech WebAccess Stack Buffer Overflow Vulnerability (CNVD-2021-80272)

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on a browser architecture. A stack buffer overflow vulnerability exists in Advantech WebAccess 9.02 and earlier versions. The vulnerability stems from a lack of proper validation of the length of user-supplied data. An attacker...

Advantech WebAccess BwFLApp Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of IOCTL 0x2711, which can be used to invoke BwFLApp.exe. The issue...

Advantech WebAccess 缓冲区错误漏洞

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on a browser architecture. A stack buffer overflow vulnerability exists in Advantech WebAccess 9.02 and earlier versions. The vulnerability stems from a lack of proper validation of the length of user-supplied data. An attacker...

Advantech WebAccess

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Advantech Equipment: WebAccess Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may allow remote code execution. 3. TECHNICAL DETAILS 3.1...

Advantech R-SeeNet ping.php Command Injection (CVE-2021-21805)

A command injection vulnerability exists in Advantech R-SeeNet. The vulnerability is due to insufficient validation of the parameter in ping.php...

PT-2021-4939 · Advantech +1 · Advantech R-Seenet +1

Name of the Vulnerable Software and Affected Versions: Advantech R-SeeNet version 2.4.15 Description: A privilege escalation issue exists in the Windows version of Advantech R-SeeNet, related to insufficient access control to the directory C:R-SeeNet. This can allow an attacker to elevate their...

PT-2021-6938

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet version 2.4.15 Description A privilege escalation issue exists due to insufficient access restrictions to the C:R-SeeNet directory. This can be exploited by an attacker using a specially crafted malicious file to elevate...

Advantech iView runProViewUpgrade Command Injection (CVE-2021-32930)

A remote command execution exists in Advantech iView. The vulnerability is due to improper input sanitization...

PT-2021-5445

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet affected versions not specified Description The issue is related to the incorrect handling of the sn filter parameter in the device list component, allowing an attacker to conduct SQL injection attacks. This can be triggered...

PT-2021-5296

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet affected versions not specified Description The issue is related to the incorrect handling of the loc filter parameter in the device list component of the Advantech R-SeeNet monitoring software. This can allow a remote...

PT-2021-5481

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet version 2.4.15 Description An exploitable SQL injection vulnerability exists in the 'group list' page. A specially-crafted HTTP request at the description filter parameter can trigger this issue. An attacker can make...

PT-2021-5148

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet affected versions not specified Description The issue is related to the incorrect handling of the esn filter parameter in the device list component of the Advantech R-SeeNet monitoring software. This can allow a remote...

PT-2021-5489

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet affected versions not specified Description A specially-crafted HTTP request can lead to SQL injection, allowing an attacker to execute arbitrary SQL queries. This can be triggered by making authenticated HTTP requests,...

PT-2021-5442

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet affected versions not specified Description The issue is related to the incorrect handling of the health filter parameter in the device list component, which can lead to SQL injection. An attacker can exploit this by making...

PT-2021-5444

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet affected versions not specified Description A specially-crafted HTTP request can lead to SQL injection, allowing an attacker to make authenticated HTTP requests at the prod filter parameter. This vulnerability can be trigger...

PT-2021-4938

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet affected versions not specified Description The issue is related to the incorrect handling of the desc filter parameter in the device list component, which can lead to SQL injection. An attacker can exploit this by making...