CVE-2018-14828

Advantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which may allow an attacker to access those files and perform actions at a system administrator level...

PT-2018-3100

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 8.3.1 and earlier Description The issue is related to improper privilege management, which may allow an attacker to access files and perform actions at a system administrator level. This could enable an attacker to...

Advantech WebAccess stack buffer overflow vulnerability (CNVD-2018-21797)

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A stack buffer overflow vulnerability exists in Advantech...

PT-2018-3101

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 8.3.1 and earlier Description The issue arises from insufficient input validation in a .dll component of the Advantech WebAccess software, allowing a remote attacker to delete arbitrary files. This can occur when t...

PT-2018-3103

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 8.3.1 and earlier Description The issue is related to a path traversal vulnerability due to incorrect restriction of the directory path name with limited access. This may allow an attacker to execute arbitrary code...

CVE-2018-14820: External Control of File Name or Path

Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, which may allow an arbitrary file deletion when processing...

PT-2018-3102

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 8.3.1 and earlier Description The issue is caused by a stack-based buffer overflow. Exploitation of this issue may allow a remote attacker to execute arbitrary code. Recommendations For Advantech WebAccess versions...

CVE-2018-14806: Improper Limitation of a Pathname to a Restricted Directory

Advantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an attacker to execute arbitrary code...

CVE-2018-14828: Improper Privilege Management

Advantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which may allow an attacker to access those files and perform actions at a system administrator level...

CVE-2018-14816: Stack-based Buffer Overflow

Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities that have been identified, which may allow an attacker to execute arbitrary code...

Advantech WebAccess Cross-Site Scripting Vulnerability (CNVD-2018-21798)

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A cross-site scripting vulnerability exists in Advantech...

Advantech WebAccess

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: WebAccess Vulnerabilities: Stack-based Buffer Overflow, External Control of File Name or Path, Improper Privilege Management, Path Traversal 2. RISK EVALUATION Successful...

CVE-2018-15703

Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim to supply malicious HTML or JavaScript code to WebAccess, which is then reflected back ...

CVE-2018-15704

Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability by sending a crafted HTTP request to broadweb/system/opcImg.asp...

CVE-2018-15704

Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability by sending a crafted HTTP request to broadweb/system/opcImg.asp...

CVE-2018-15704

Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability by sending a crafted HTTP request to broadweb/system/opcImg.asp...

CVE-2018-15703: Improper Neutralization of Input During Web Page Generation

Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim to supply malicious HTML or JavaScript code to WebAccess, which is then reflected back ...

CVE-2018-15704: Out-of-bounds Write

Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability by sending a crafted HTTP request to broadweb/system/opcImg.asp...

PT-2018-13155

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 8.3.2 and below Description The issue allows a remote unauthenticated attacker to potentially exploit multiple reflected cross-site scripting vulnerabilities by tricking a victim into supplying malicious HTML or...

PT-2018-3096

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 8.3.2 and below Description The issue is related to a stack buffer overflow. A remote authenticated attacker could potentially exploit this by sending a crafted HTTP request to "broadweb/system/opcImg.asp". The...