Advantech WebAccess Remote Code Execution (CVE-2019-10987)

A remote code execution vulnerability exists in Advantech WebAccess. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2019-10987

In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution...

CVE-2019-10987

Summary of CVE-2019-10987 : The vulnerability affects Advantech WebAccess/SCADA (and related WebAccess Node components) prior to version 8.4.1, specifically in the webvrpcs/bwdraw components. It is caused by insufficient validation of the length of user-supplied data, leading to out-of-bounds wri...