Advantech WebAccess Stack-based Buffer Overflow (CVE-2018-18999)

A stack-based buffer overflow vulnerability exists in Advantech WebAccess. The vulnerability is due to a lack of boundary checks while copying user-supplied data into a stack-based buffer within BwPAlarm.dll. A remote, unauthenticated attacker could exploit this vulnerability by sending a...

CVE-2018-18999

WebAccess/SCADA, WebAccess/SCADA Version 8.3.2 installed on Windows 2008 R2 SP1. Lack of proper validation of user supplied input may allow an attacker to cause the overflow of a buffer on the stack...

CVE-2018-18999

CVE-2018-18999 affects Advantech WebAccess/SCADA (Version 8.3.2 on Windows 2008 R2 SP1). Root cause: a stack-based buffer overflow due to lack of boundary checks when copying user-supplied data into BwPAlarm.dll, enabling remote unauthenticated exploitation via RPC requests. Impact is a potential...