CVE-2016-9353

An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The admin password is stored in the system and is encrypted with a static key hard-coded in the program. Attackers could reverse the admin account password for use...

CVE-2017-5152

Advantech WebAccess v8.1 contains an authentication bypass vulnerability accessible via a crafted URL, allowing unrestricted page access (CVE-2017-5152). Root cause is inadequate access control for web server resources, with CVSSv3.0 base score 9.1 (Network, Low attack complexity, no privileges r...

CVE-2017-5154

The CVE-2017-5154 issue affects Advantech WebAccess 8.1, where an SQL injection vulnerability exists in updateTemplate.aspx. The underlying flaw is insufficient input validation, enabling an attacker to craft inputs that could grant administrative access to the application and its data files. Pub...

CVE-2016-9349

CVE-2016-9349 affects Advantech SUSIAccess Server (

CVE-2016-9351

CVE-2016-9351 affects Advantech SUISAccess Server (3.0 and earlier). A directory traversal/file upload flaw allows uploading and unpacking a zip file, enabling potential arbitrary file write. Public PoCs and advisories (RecoveryMgmt/upload) demonstrate a traversal path to place files on the serve...

CVE-2016-9353

CVE-2016-9353 affects Advantech SUSIAccess Server (3.0 and earlier). The admin password is stored on the system and encrypted with a static, hard-coded key, enabling reverse retrieval and misuse of the admin account. ZDI/ZDI-adjacent disclosures describe a local privilege/escalation path leveragi...

CVE-2017-5154: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software. Successful attack could result in administrative access to the application and its data files...

CVE-2017-5152: Improper Authentication

An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator URL on the web server, a malicious user is able to access pages unrestricted AUTHENTICATION BYPASS...

CVE-2016-9351: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The directory traversal/file upload error allows an attacker to upload and unpack a zip file...

CVE-2016-9353: Undefined Security Weakness

An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The admin password is stored in the system and is encrypted with a static key hard-coded in the program. Attackers could reverse the admin account password for use...

CVE-2016-9349: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. An attacker could traverse the file system and extract files that can result in information disclosure...

PT-2017-16346

Name of the Vulnerable Software and Affected Versions Advantech WebAccess version 8.1 Description An issue was discovered that allows a malicious user to bypass authentication and access pages unrestricted by accessing a specific uniform resource locator URL on the web server. Recommendations For...

Advantech WebAccess 'updateTemplate.aspx' SQL Injection and Authentication Bypass Vulnerabilities

Advantech WebAccess is prone to an SQL injection SQLi vulnerability and an authentication-bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Advantech WebAccess Authentication Bypass

Binary data scadaadvantechwebaccesscve-2017-5152.nbin...

Advantech WebAccess SQLi

Binary data scadaadvantechwebaccesscve-2017-5154.nbin...

Advantech WebAccess Login

This module will attempt to authenticate to Advantech WebAccess. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/loginscanner/advantechwebaccess' require...

Advantech WebAccess updateTemplate.aspx SQL Injection (CVE-2017-5154)

An SQL injection vulnerability has been reported in Advantech WebAccess. The vulnerability is due to insufficient validation of the template parameter in HTTP request sent to the updateTemplate.aspx. A remote attacker could exploit this vulnerability by sending a HTTP request with a malicious SQL...

Advantech WebAccess 8.1 Post Authentication Credential Collector

This module allows you to log into Advantech WebAccess 8.1, and collect all of the credentials. Although authentication is required, any level of user permission can exploit this vulnerability. Note that 8.2 is not suitable for this. Module Options msf use auxiliary/gather/advantech/webaccesscred...

Advantech WebAccess Security Bypass Vulnerability

Advantech WebAccess formerly known as BroadWinWebAccess is a set of HMI/SCADA software based on browser architecture from Advantech. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A securit...

Advantech WebAccess 'updateTemplate.aspx' SQL Injection Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A SQL injection vulnerability exists in Advantech WebAcces...