CVE-2021-32943

The CVE-2021-32943 issue affects Advantech WebAccess/SCADA before 8.4.5 and before 9.0.1, caused by a stack-based buffer overflow that could allow remote code execution. Multiple connected sources (NVD, Red Hat, Red Team/RH CVE entry, and ICS advisory) confirm the vulnerability in the WebAccess/S...

CVE-2021-22676

UserExcelOut.asp within WebAccess/SCADA is vulnerable to cross-site scripting XSS, which could allow an attacker to send malicious JavaScript code. This could result in hijacking of cookie/session tokens, redirection to a malicious webpage, and unintended browser action on the WebAccess/SCADA...

CVE-2021-22676

CVE-2021-22676 affects Advantech WebAccess/SCADA: UserExcelOut.asp is vulnerable to cross-site scripting (XSS), enabling attackers to run malicious JavaScript and hijack cookie/session tokens or redirect users. Affected versions are WebAccess/SCADA prior to 8.4.5 and prior to 9.0.1 (desktop/SCADA...

CVE-2021-22674

The CVE-2021-22674 issue affects Advantech WebAccess/SCADA; versions prior to 8.4.5 and prior to 9.0.1 are vulnerable to a relative path traversal that could allow an attacker to access unauthorized files and directories. Remediation is to upgrade to WebAccess/SCADA 8.4.5 or 9.0.1, as noted in mu...

CVE-2021-22674

The affected product is vulnerable to a relative path traversal condition, which may allow an attacker access to unauthorized files and directories on the WebAccess/SCADA WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1...

PT-2021-19989

Name of the Vulnerable Software and Affected Versions WebAccess/SCADA versions prior to 8.4.5 WebAccess/SCADA versions prior to 9.0.1 Description The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code on the...

CVE-2021-32943: Stack-based Buffer Overflow

The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code on the WebAccess/SCADA WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1...

PT-2021-15168

Name of the Vulnerable Software and Affected Versions WebAccess/SCADA versions prior to 8.4.5 WebAccess/SCADA versions prior to 9.0.1 Description The affected product is vulnerable to a relative path traversal condition, which may allow an attacker access to unauthorized files and directories on...

CVE-2021-22676: Improper Neutralization of Input During Web Page Generation

UserExcelOut.asp within WebAccess/SCADA is vulnerable to cross-site scripting XSS, which could allow an attacker to send malicious JavaScript code. This could result in hijacking of cookie/session tokens, redirection to a malicious webpage, and unintended browser action on the WebAccess/SCADA...

CVE-2021-22674: Relative Path Traversal

The affected product is vulnerable to a relative path traversal condition, which may allow an attacker access to unauthorized files and directories on the WebAccess/SCADA WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1...

PT-2021-15170

Name of the Vulnerable Software and Affected Versions WebAccess/SCADA versions prior to 8.4.5 WebAccess/SCADA versions prior to 9.0.1 Description The issue concerns a cross-site scripting XSS vulnerability in the UserExcelOut.asp file within WebAccess/SCADA. This vulnerability could allow an...

Advantech WebAccess/SCADA Path Traversal Vulnerability (CNVD-2021-59235)

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. A path traversal vulnerability exists in Advantech WebAccess/SCADA, which stems from the product's failure to add access rights to input data. An attacker could use the vulnerability ...

Advantech WebAccess/SCADA Cross-Site Scripting Vulnerability (CNVD-2021-59236)

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. A cross-site scripting vulnerability exists in Advantech WebAccess/SCADA, which originates from UserExcelOut.asp failing to properly validate the correctness of user data. The...

Advantech WebAccess/SCADA Buffer Overflow Vulnerability (CNVD-2021-59234)

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. A buffer overflow vulnerability exists in Advantech WebAccess/SCADA, which arises from the product failing to properly validate data boundaries. An attacker could cause a stack overfl...

Advantech WebAccess SCADA

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Advantech Equipment: WebAccess/SCADA Vulnerabilities: Cross-site Scripting XSS, Relative Path Traversal, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

Advantech WebAccess/SCADA 缓冲区错误漏洞

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. A buffer overflow vulnerability exists in Advantech WebAccess/SCADA, which arises from the product failing to properly validate data boundaries. An attacker could cause a stack overfl...

The vulnerability of the executable file Def.exe in the interactive graphical SCADA system Interactive Graphical SCADA System (IGSS) allows a intruder to perform arbitrary actions.

The vulnerability of the executable file Def.exe in the interactive graphical SCADA system Interactive Graphical SCADA System IGSS is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a intruder to execute arbitrary code...

PT-2021-4705

Name of the Vulnerable Software and Affected Versions КРУГ-2000 affected versions not specified Description The issue is related to the lack of encryption of critical information in the KrServerBDdemoRT.exe module of the КРУГ-2000 SCADA system. This could allow a remote attacker to intercept...

AVEVA System Platform Access Control Error Vulnerability

AVEVA System Platform is an application from AVEVA UK. A responsive, standards-driven and scalable foundation for regulatory, enterprise SCADA, MES and IIoT applications. AVEVA System Platform is vulnerable to an Access Control Error vulnerability that arises from the software not properly...

LCDS LAquis SCADA 跨站脚本漏洞

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is primarily used for data acquisition and process control of equipment that has communication technology. A cross-site scripting vulnerability exists in LCDS LAquis SCADA that...