Advantech WebAccess Directory Traversal Vulnerability (CNVD-2017-06980)

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A directory traversal vulnerability exists in Advantech...

PT-2017-18004

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 8.1 and prior Description An Absolute Path Traversal issue may allow an attacker to traverse the file system to access restricted files or directories. Recommendations For Advantech WebAccess versions 8.1 and prior...

Advantech WebAccess odbcPg4 Absolute Path Traversal File Denial of Service Vulnerability

This vulnerability allows remote attackers to cause a denial of service condition on vulnerable installations of Advantech WebAccess. Authentication is required to exploit this vulnerability. The specific flaw exists within odbcPg4.asp. The issue results from the lack of proper validation of a...

CVE-2016-5810

upAdminPg.asp in Advantech WebAccess before 8.120160519 allows remote authenticated administrators to obtain sensitive password information via unspecified vectors...

CVE-2016-5810

upAdminPg.asp in Advantech WebAccess before 8.120160519 allows remote authenticated administrators to obtain sensitive password information via unspecified vectors...

Design/Logic Flaw

upAdminPg.asp in Advantech WebAccess before 8.120160519 allows remote authenticated administrators to obtain sensitive password information via unspecified vectors...

CVE-2016-5810

Advantech WebAccess vulnerable upAdminPg.asp (before 8.1_20160519) exposes password information to remote authenticated administrators via unspecified vectors. The CVE-2016-5810 issue is classified as an information-disclosure vulnerability in the upAdminPg.asp component, enabling an admin higher...

CVE-2016-5810

upAdminPg.asp in Advantech WebAccess before 8.120160519 allows remote authenticated administrators to obtain sensitive password information via unspecified vectors...

CVE-2016-5810: Exposure of Sensitive Information to an Unauthorized Actor

upAdminPg.asp in Advantech WebAccess before 8.120160519 allows remote authenticated administrators to obtain sensitive password information via unspecified vectors...

Advantech WebAccess DLL Hijacking Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A DLL hijacking vulnerability exists in Advantech WebAcces...

Advantech WebAccess 7.2 < 7.2-2014.07.30 Multiple ActiveX RCE

Binary data 9959.prm...

Advantech WebAccess < 8.2_20161101 Multiple Vulnerabilities

Binary data 9961.prm...

Advantech WebAccess < 7.0-2011.12.20 Multiple Vulnerabilities

Binary data 9955.prm...

Advantech WebAccess < 7.0-2011.05.23 Multiple Vulnerabilities

Binary data 9953.prm...

Advantech WebAccess < 6.0-2008.06.06 Remote Authentication Bypass

Binary data 9951.prm...

Advantech WebAccess < 7.2-2013.11.14 Multiple Vulnerabilities

Binary data 9957.prm...

Advantech WebAccess < 7.1-2013.05.30 Multiple Vulnerabilities

Binary data 9956.prm...

CVE-2017-5152

An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator URL on the web server, a malicious user is able to access pages unrestricted AUTHENTICATION BYPASS...

CVE-2017-5152

An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator URL on the web server, a malicious user is able to access pages unrestricted AUTHENTICATION BYPASS...

Sql injection

An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software. Successful attack could result in administrative access to the application and its data files...