CVE-2015-6476

Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which makes it easier for remote attackers to obtain access via an SSH session...

CVE-2015-6476

The CVE-2015-6476 vulnerability affects Advantech EKI-122x-BE (firmware <1.65), EKI-132x (firmware <1.98), and EKI-136x (firmware

CVE-2015-6476: Undefined Security Weakness

Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which makes it easier for remote attackers to obtain access via an SSH session...

PT-2015-3064

Name of the Vulnerable Software and Affected Versions Advantech EKI-122x-BE devices versions prior to 1.65 Advantech EKI-132x devices versions prior to 1.98 Advantech EKI-136x devices versions prior to 1.27 Description The issue is related to hardcoded SSH keys in the affected devices, making it...

Advantech Clears Hard-Coded SSH Keys from EKI Switches

Update Critical industrial switches used worldwide for automation contained hard-coded SSH keys that put devices and networks at risk. Advantech, a Taiwanese distributor, has developed new firmware for its EKI-122x series of products that disables HTTPS and SSH. SSH keys are a means by which...

Advantech WebAccess ActiveX ConvToSafeArray Stack Buffer Overflow (CVE-2014-9208)

A stack buffer overflow vulnerability exists in Advantech's WebAccess SCADA software. The vulnerability is due to insufficient input validation of an argument to ConvToSafeArray in the AspVCObj.AspDataDriven ActiveX control. A remote, unauthenticated attacker can exploit this vulnerability by...

Advantech WebAccess Webdobj ActiveX UpdateProject Stack Buffer Overflow (CVE-2014-9208)

A stack buffer overflow vulnerability exists in Advantech's WebAccess SCADA software. The vulnerability is due to insufficient input validation of one of the UpdateProject's arguments in the Webdobj ActiveX control. A remote, unauthenticated attacker can exploit this vulnerability by enticing a...

Advantech WebAccess AspVCObj.AspDataDriven ActiveX Stack Buffer Overflow (CVE-2014-9208)

A stack buffer overflow vulnerability exists in Advantech's WebAccess SCADA software. The vulnerability is due to insufficient input validation of an argument of multiple functions in the AspVCObj ActiveX control. A remote, unauthenticated attacker can exploit this vulnerability by enticing a...

Stack overflow

Multiple stack-based buffer overflows in an unspecified DLL file in Advantech WebAccess before 8.020150816 allow remote attackers to execute arbitrary code via a crafted file that triggers long string arguments to functions...

CVE-2014-9202

Multiple stack-based buffer overflows in an unspecified DLL file in Advantech WebAccess before 8.020150816 allow remote attackers to execute arbitrary code via a crafted file that triggers long string arguments to functions...

CVE-2014-9202

Multiple stack-based buffer overflows in an unspecified DLL file in Advantech WebAccess before 8.020150816 allow remote attackers to execute arbitrary code via a crafted file that triggers long string arguments to functions...

CVE-2014-9202

CVE-2014-9202 affects Advantech WebAccess (before 8.0_20150816). Multiple stack-based buffer overflows in an unspecified DLL could allow arbitrary code execution via a crafted file that triggers long string arguments. CVSS v2 base score 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C). Affected products are WebA...

CVE-2014-9202: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in an unspecified DLL file in Advantech WebAccess before 8.020150816 allow remote attackers to execute arbitrary code via a crafted file that triggers long string arguments to functions...

PT-2015-4157

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.0 20150816 Description The issue is related to multiple stack-based buffer overflows in an unspecified DLL file. This allows remote attackers to execute arbitrary code via a crafted file that triggers lo...

Advantech WebAccess Heap Buffer Overflow Vulnerability

Advantech WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech, China. A heap buffer overflow vulnerability exists in Advantech WebAccess. A local attacker could exploit this vulnerability to execute arbitrary code, which could also result in a denial of service...

Advantech EKI Vulnerabilities (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-15-344-01A Advantech EKI Vulnerabilities that was published December 15, 2015, on the NCCIC/ICS-CERT web site. --------- Begin Update B Part 1 of 3 -------- HD Moore of Rapid7 identified several vulnerabilities in...

CVE-2014-9208

Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attackers to execute arbitrary code via unknown vectors...

Stack overflow

Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-9208

Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-9208

CVE-2014-9208 affects Advantech WebAccess/SCADA, involving multiple stack-based buffer overflows in ASPVCObj ActiveX controls (AspDataDriven/UpdateProject) that can be exploited remotely via crafted web pages to achieve code execution in the context of the logged-in user. Technical details in con...