Advantech WebAccess Multiple Vulnerabilities

Advantech WebAccess is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2017-16348

Name of the Vulnerable Software and Affected Versions Advantech WebAccess version 8.1 Description An issue in Advantech WebAccess allows for SQL injection, which can be exploited by supplying malformed input to the software. A successful attack could result in administrative access to the...

Advantech WebAccess

CVSS V3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Advantech Equipment: WebAccess Vulnerabilities: Authentication Bypass, SQL Injection AFFECTED PRODUCTS The following WebAccess version is affected: WebAccess Version 8.1 IMPACT Successful exploitation of this...

Advantech WebAccess updateTemplate SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Advantech WebAccess. Authentication is required to exploit this vulnerability, but can be easily bypassed. The specific flaw exists within updateTemplate.aspx. The vulnerability is caused b...

Advantech WebAccess 8.x < 8.1 Multiple Vulnerabilities

Binary data 9862.prm...

Advantech WebAccess 8.x < 8.0-2015.08.16 RCE

Binary data 9861.prm...

Advantech WebAccess Version Detection (SCADA)

Binary data 9860.prm...

Advantech WebAccess Detection (SCADA)

Binary data 9859.prm...

PT-2016-7734

Name of the Vulnerable Software and Affected Versions Advantech SUISAccess Server versions 3.0 and prior Description An issue was discovered that allows an attacker to perform a directory traversal and file upload, enabling them to upload and unpack a zip file. This can potentially lead to remote...

PT-2016-7733

Name of the Vulnerable Software and Affected Versions Advantech SUISAccess Server versions 3.0 and prior Description The issue allows an attacker to traverse the file system and extract files, resulting in information disclosure. This is related to the downloadCSV file parameter. Recommendations...

PT-2016-7735

Name of the Vulnerable Software and Affected Versions Advantech SUISAccess Server versions 3.0 and prior Description An issue was discovered where the admin password is stored in the system and encrypted with a static key that is hard-coded in the program. This could allow attackers to reverse th...

Advantech SUSIAccess Server UpgradeMgmt upload Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech SUSIAccess Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of the UpgradeMgmt servlet upload function. The issue lies in t...

Advantech SUSIAccess Server Static Encryption Key Privilege Escalation Vulnerability

This vulnerability allows attackers to escalate privileges on vulnerable installations of Advantech SUSIAccess Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within encryption and storage of the administrator password. The password is stored in a...

Advantech SUSIAccess Server downloadCSV file Parameter Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Advantech SUSIAccess Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of downloadCSV.jsp. When parsing the file element, the...

Advantech SUSIAccess Server Information Disclosure Vulnerability

SUSIAccess is an easy-to-use remote device management software solution. An information disclosure vulnerability exists in Advantech SUSIAccess Server. An attacker can exploit the vulnerability to traverse the file system to obtain sensitive information...

Advantech SUSIAccess Server Local Elevation of Privilege Vulnerability

SUSIAccess is an easy-to-use remote device management software solution. A local elevation of privilege vulnerability exists in Advantech SUSIAccess Server. Since the admin password is stored on the system and encrypted using a hard-coded static key in the program. An attacker can exploit the...

Advantech SUSIAccess Server Directory Traversal Vulnerability

SUSIAccess is an easy-to-use remote device management software solution. A directory traversal vulnerability exists in Advantech SUSIAccess Server. An attacker can exploit the vulnerability to traverse files or upload and decompress zip files...

Vulnerability in Advantech WebAccess ActiveX

Advantech WebAccess formerly known as BroadWin WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation devices.ActiveX is one of...

Advantech WebAccess 8.1 ActiveX Buffer Overflow Vulnerability

WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation equipment in facility management systems, power stations and building automation systems. A buffer overflow vulnerability exists in an ActiveX control in Advantech WebAccess...

The software of the Advantech WebAccess remote monitoring system is vulnerable, allowing a intruder to trigger a service failure.

The vulnerability of Advantech WebAccess remote monitoring software arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created DLL file...