PT-2018-16960

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA versions prior to V8.2 20170817 Description A SQL Injection issue was discovered in the software. It does not properly sanitize its inputs for SQL commands, which can lead to information disclosure. The issue is relat...

PT-2018-16961

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA versions prior to V8.2 20170817 Description A Path Traversal issue allows an attacker to have read access to files within the directory structure of the target device. This issue can potentially lead to remote code...

CVE-2018-5443: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.220170817. WebAccess/SCADA does not properly sanitize its inputs for SQL commands...

CVE-2018-5445: Improper Limitation of a Pathname to a Restricted Directory

A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.220170817. An attacker has read access to files within the directory structure of the target device...

Advantech WebAccess/SCADA Directory Traversal Vulnerability

Advantech WebAccess is a browser-based HMI software package for human machine interfaces, as well as monitoring and data acquisition SCADA. A directory traversal vulnerability exists in Advantech WebAccess/SCADA, which can be exploited by an attacker to read files in the directory structure of a...

Advantech WebAccess/SCADA

CVSS v3 5.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Advantech Equipment: WebAccess/SCADA Vulnerabilities: Path Traversal, SQL Injection AFFECTED PRODUCTS The following versions of WebAccess/SCADA, a SCADA software platform, are affected: WebAccess/SCADA versions prior ...

Navis WebAccess Web Application Detection (SCADA)

Binary data 9560.prm...

Advantech WebAccess SCADA webeye.ocx ip_address Parameter Buffer Overflow (CVE-2014-8388)

A stack buffer overflow exists in Advantech's WebAccess SCADA software. The vulnerability is due to insufficient input validation of the ipaddress parameter contained in the webeye.ocx ActiveX control, a part of the WebAccess Client. A remote, unauthenticated attacker could exploit this...

Advantech WebAccess SCADA ProjectName Parameter Buffer Overflow (CVE-2014-0991)

A stack buffer overflow exists in Advantech's WebAccess SCADA software. This is due to insufficient input validation of the ProjectName parameter contained in the webvact.ocx ActiveX control, a part of the WebAccess Client. A remote, unauthenticated attacker could exploit this vulnerability by...

Advantech WebAccess SCADA webvact.ocx GotoCmd Buffer Overflow (CVE-2014-0765)

A stack buffer overflow has been reported in Advantech's WebAccess SCADA software. This vulnerability is due to insufficient input validation on the GotoCmd parameter of the webvact.ocx ActiveX control, a part of the WebAccess Client. A remote, unauthenticated attacker could exploit this...

Advantech WebAccess SCADA webvact.ocx AccessCode Buffer Overflow (CVE-2014-0767)

A stack buffer overflow exists in Advantech's WebAccess SCADA software. This is due to insufficient input validation on the AccessCode parameter of the webvact.ocx ActiveX control, a part of the WebAccess Client. A remote, unauthenticated attacker could exploit this vulnerability by enticing a...

Advantech WebAccess SCADA bwocxrun.ocx Command Execution (CVE-2014-0773)

A command execution vulnerability has been reported in Advantech WebAccess SCADA software. The vulnerability is due to insufficient input validation while parsing the first parameter of the bwocxrun.ocx ActiveX control. A remote, unauthenticated attacker could exploit this vulnerability by entici...

Advantech WebAccess SCADA webvact.ocx NodeName Buffer Overflow (CVE-2014-0764)

A stack buffer overflow has been reported in Advantech's WebAccess SCADA software. This is due to insufficient input validation on the NodeName parameter of the webvact.ocx ActiveX control, a part of the WebAccess Client. A remote, unauthenticated attacker could exploit this vulnerability by...