CVE-2017-5175

CVE-2017-5175 affects Advantech WebAccess 8.1 and earlier and is a DLL hijacking vulnerability. An attacker could cause the application to load a malicious DLL from the search path, leading to arbitrary code execution on the affected system. Connected sources corroborate affected software version...

CVE-2017-5175: Uncontrolled Search Path Element

Advantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an attacker to run a malicious DLL file within the search path resulting in execution of arbitrary code...

PT-2018-8239

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess versions 8.1 and earlier Description: The issue allows an attacker to run a malicious DLL file within the search path, resulting in the execution of arbitrary code. This is due to a DLL hijacking vulnerability...

The vulnerability of the VBWinExec function in the software for remote monitoring of Advantech WebAccess allows a hacker to execute arbitrary commands on the operating system.

The vulnerability of the VBWinExec function Node\AspVBObj.dll in the software for remote monitoring of Advantech WebAccess is related to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute...

Advantech WebAccess HMI Designer Arbitrary Code Execution Vulnerability

Advantech WebAccess HMI Designer is a human machine interface HMI runtime development software. An arbitrary code execution vulnerability exists in Advantech WebAccess HMI Designer 2.1.7.32 and prior versions when handling specially crafted .pm3 files, which can cause the system to write outside ...

Advantech WebAccess HMI Designer Heap Buffer Overflow Vulnerability

Advantech WebAccess HMI Designer is a human machine interface HMI runtime development software. A heap buffer overflow vulnerability exists in Advantech WebAccess HMI Designer 2.1.7.32 and prior versions when handling specially crafted .pm3 files, which can be exploited by an attacker to remotely...

Advantech WebAccess HMI Designer Double Release Vulnerability

Advantech WebAccess HMI Designer is a human machine interface HMI runtime development software. A double-release vulnerability exists in Advantech WebAccess HMI Designer 2.1.7.32 and prior versions when handling specially crafted .pm3 files, which can be exploited by an attacker to remotely execu...

CVE-2018-8837

Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buffer area and may allow remote code execution...

CVE-2018-8837

Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buffer area and may allow remote code execution...

Remote code execution

Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buffer area and may allow remote code execution...

Heap overflow

Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

CVE-2018-8835

Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

CVE-2018-8833

Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

Double free

Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

CVE-2018-8833

Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

CVE-2018-8835

Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

CVE-2018-8833

Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

CVE-2018-8835

Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...

CVE-2018-8837

Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buffer area and may allow remote code execution...

CVE-2018-8833

Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...