Lucene search
K

7 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/05/08 12:0 a.m.17 views

Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c84 Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x00013c84 in BwWebSvc.dll. The issue results from the...

9.8CVSS3.5AI score0.26718EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/05/08 12:0 a.m.16 views

Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c80 Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x00013c80 in BwWebSvc.dll. The issue results from the...

9.8CVSS3.5AI score0.26718EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/05/08 12:0 a.m.17 views

Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c77 Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x00013c77 in BwWebSvc.dll. The issue results from the...

9.8CVSS3.5AI score0.26718EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/05/08 12:0 a.m.17 views

Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c74 IOCTL 0x00013c75 SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of IOCTL 0x00013c74 and IOCTL 0x00013c75 in...

7.5CVSS1.1AI score0.00333EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/05/08 12:0 a.m.22 views

Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c71 SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of IOCTL 0x00013c71 in BwWebSvc.dll. The issue...

7.5CVSS0.9AI score0.00333EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/05/08 12:0 a.m.21 views

Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c76 IOCTL 0x00013c77 SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of IOCTL 0x00013c76 and IOCTL 0x00013c77 in...

7.5CVSS1.1AI score0.00333EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/05/08 12:0 a.m.15 views

Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c7b Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of IOCTL 0x00013c7b in BwWebSvc.dll. The issue results from...

9.8CVSS3.8AI score0.26718EPSS
Exploits0References1
Rows per page
Query Builder