CVE-2018-14806

Advantech WebAccess CVE-2018-14806 is a path traversal vulnerability in WebAccess 8.3.1 and earlier that could allow an attacker to execute arbitrary code. Affected software: Advantech WebAccess (versions 8.3.1 and prior). Root cause: path traversal in handling file paths/execution flow enabling ...

CVE-2018-14806

Advantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an attacker to execute arbitrary code...

CVE-2018-14816

CVE-2018-14816 maps to multiple stack-based buffer overflow flaws in Advantech WebAccess components. Connected advisories (ZDI-18-1300, -1302, -1303, -1304, -1305, -1306, -1307, -1300? and related CNVD) describe remote code execution via careless validation of user-supplied data copied into fixed...

PT-2018-3100

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 8.3.1 and earlier Description The issue is related to improper privilege management, which may allow an attacker to access files and perform actions at a system administrator level. This could enable an attacker to...

Advantech WebAccess stack buffer overflow vulnerability (CNVD-2018-21797)

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A stack buffer overflow vulnerability exists in Advantech...

PT-2018-3101

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 8.3.1 and earlier Description The issue arises from insufficient input validation in a .dll component of the Advantech WebAccess software, allowing a remote attacker to delete arbitrary files. This can occur when t...

PT-2018-3103

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 8.3.1 and earlier Description The issue is related to a path traversal vulnerability due to incorrect restriction of the directory path name with limited access. This may allow an attacker to execute arbitrary code...

Advantech WebAccess Cross-Site Scripting Vulnerability (CNVD-2018-21798)

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A cross-site scripting vulnerability exists in Advantech...

PT-2018-3102

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 8.3.1 and earlier Description The issue is caused by a stack-based buffer overflow. Exploitation of this issue may allow a remote attacker to execute arbitrary code. Recommendations For Advantech WebAccess versions...

Advantech WebAccess

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: WebAccess Vulnerabilities: Stack-based Buffer Overflow, External Control of File Name or Path, Improper Privilege Management, Path Traversal 2. RISK EVALUATION Successful...

CVE-2018-14806: Improper Limitation of a Pathname to a Restricted Directory

Advantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an attacker to execute arbitrary code...

CVE-2018-14828: Improper Privilege Management

Advantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which may allow an attacker to access those files and perform actions at a system administrator level...

CVE-2018-14816: Stack-based Buffer Overflow

Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities that have been identified, which may allow an attacker to execute arbitrary code...

CVE-2018-14820: External Control of File Name or Path

Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, which may allow an arbitrary file deletion when processing...

CVE-2018-15703

Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim to supply malicious HTML or JavaScript code to WebAccess, which is then reflected back ...

Stack overflow

Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability by sending a crafted HTTP request to broadweb/system/opcImg.asp...

CVE-2018-15704

Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability by sending a crafted HTTP request to broadweb/system/opcImg.asp...

CVE-2018-15704

Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability by sending a crafted HTTP request to broadweb/system/opcImg.asp...

CVE-2018-15703

Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim to supply malicious HTML or JavaScript code to WebAccess, which is then reflected back ...

CVE-2018-15703

Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim to supply malicious HTML or JavaScript code to WebAccess, which is then reflected back ...