CVE-2019-6554: Improper Access Control

Advantech WebAccess/SCADA, Versions 8.3.5 and prior. An improper access control vulnerability may allow an attacker to cause a denial-of-service condition...

CVE-2019-6550: Stack-based Buffer Overflow

Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple stack-based buffer overflow vulnerabilities, caused by a lack of proper validation of the length of user-supplied data, may allow remote code execution...

CVE-2019-6552: Improper Neutralization of Special Elements used in a Command

Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple command injection vulnerabilities, caused by a lack of proper validation of user-supplied data, may allow remote code execution...

Advantech WebAccess/SCADA Incorrect Access Control Vulnerability

Advantech WebAccess/SCADA is a set of SCADA software from Advantech based on browser architecture. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. An incorrect access control vulnerability exists in...

PT-2019-3571

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA versions 8.3.5 and prior Description The issue is related to improper access control, which may allow an attacker to cause a denial-of-service condition. This can be exploited by a remote attacker to disrupt service...

Advantech WebAccess/SCADA

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: WebAccess/SCADA Vulnerabilities: Command Injection, Stack-based Buffer Overflow, Improper Access Control 2. RISK EVALUATION Successful exploitation of these vulnerabilities may...

PT-2019-3572

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA version 8.4.1 Description The issue is related to a stack-based buffer overflow that allows a remote, unauthenticated attacker to execute arbitrary code via a crafted IOCTL 70603 RPC message. This is due to improper...

CVE-2019-6523

WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands...

Sql injection

WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands...

Authentication flaw

WebAccess/SCADA, Version 8.3. An improper authentication vulnerability exists that could allow a possible authentication bypass allowing an attacker to upload malicious data...

CVE-2019-6521

WebAccess/SCADA, Version 8.3. Specially crafted requests could allow a possible authentication bypass that could allow an attacker to obtain and manipulate sensitive information...

CVE-2019-6519

WebAccess/SCADA, Version 8.3. An improper authentication vulnerability exists that could allow a possible authentication bypass allowing an attacker to upload malicious data...

CVE-2019-6519

WebAccess/SCADA, Version 8.3. An improper authentication vulnerability exists that could allow a possible authentication bypass allowing an attacker to upload malicious data...

CVE-2019-6521

WebAccess/SCADA, Version 8.3. Specially crafted requests could allow a possible authentication bypass that could allow an attacker to obtain and manipulate sensitive information...

CVE-2019-6523

WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands...

PT-2019-18136

Name of the Vulnerable Software and Affected Versions WebAccess/SCADA version 8.3 Description An improper authentication issue exists, potentially allowing an authentication bypass. This could enable an attacker to upload malicious data. Recommendations For version 8.3, update to a version that...

PT-2019-18137

Name of the Vulnerable Software and Affected Versions WebAccess/SCADA version 8.3 Description The issue allows specially crafted requests to possibly bypass authentication, enabling an attacker to obtain and manipulate sensitive information. Recommendations For version 8.3, apply the necessary...

PT-2019-18138

Name of the Vulnerable Software and Affected Versions WebAccess/SCADA version 8.3 Description The software does not properly sanitize its inputs for SQL commands, which can lead to potential issues. Recommendations For version 8.3, ensure proper input sanitization for SQL commands to prevent...

CVE-2019-6523: Improper Neutralization of Special Elements used in an SQL Command

WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands...

CVE-2019-6519: Improper Authentication

WebAccess/SCADA, Version 8.3. An improper authentication vulnerability exists that could allow a possible authentication bypass allowing an attacker to upload malicious data...