Design/Logic Flaw

In WebAccess/SCADA Versions 8.3.5 and prior, an out-of-bounds read vulnerability is caused by a lack of proper validation of user-supplied data. Exploitation of this vulnerability may allow disclosure of information...

Heap overflow

In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution. Note: A different vulnerability than CVE-2019-1099...

Stack overflow

In WebAccess/SCADA, Versions 8.3.5 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution...

CVE-2019-10993

CVE-2019-10993 corresponds to multiple untrusted pointer dereference vulnerabilities in Advantech WebAccess/SCADA environments (and WebAccess Node viewsrv) that permit remote code execution. The connected ZDI advisories describe specific 0x27xx IOCTL/0x27E? interfaces in the webvrpcs process wher...

CVE-2019-10993

In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference vulnerabilities may allow a remote attacker to execute arbitrary code...

CVE-2019-10987

Summary of CVE-2019-10987 : The vulnerability affects Advantech WebAccess/SCADA (and related WebAccess Node components) prior to version 8.4.1, specifically in the webvrpcs/bwdraw components. It is caused by insufficient validation of the length of user-supplied data, leading to out-of-bounds wri...

CVE-2019-10987

In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution...

CVE-2019-10983

In WebAccess/SCADA Versions 8.3.5 and prior, an out-of-bounds read vulnerability is caused by a lack of proper validation of user-supplied data. Exploitation of this vulnerability may allow disclosure of information...

CVE-2019-10983

CVE-2019-10983 affects Advantech WebAccess/SCADA versions 8.3.5 and earlier, with an out-of-bounds read in viewsrv.dll caused by improper validation of user-supplied data. This can disclose information. The ZDI advisory (ZDI-19-621) and related sources describe the vulnerability and indicate reme...

CVE-2019-10989

Technical details for CVE-2019-10989 are not publicly available in the provided documents. Monitor for updates to affected product versions and mitigations.

CVE-2019-10989

In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution. Note: A different vulnerability than CVE-2019-1099...

CVE-2019-10991

In WebAccess/SCADA, Versions 8.3.5 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution...

CVE-2019-10991

Insight: CVE-2019-10991 corresponds to a stack-based buffer overflow in Advantech WebAccess/SCADA (and related WebAccess products) prior to version 8.3.6 where user-supplied data length is not properly validated before copying into a fixed-size buffer, enabling remote code execution. Connected ad...

CVE-2019-10985

In WebAccess/SCADA, Versions 8.3.5 and prior, a path traversal vulnerability is caused by a lack of proper validation of a user-supplied path prior to use in file operations. An attacker can leverage this vulnerability to delete files while posing as an administrator...

CVE-2019-10985

Advantech WebAccess/SCADA — CVE-2019-10985 affects versions 8.3.5 and earlier. Root cause: path traversal due to insufficient validation of a user-supplied path before file operations, enabling an attacker to delete files (as Administrator). Connected sources indicate remote exploitation potentia...

CVE-2019-10989: Out-of-bounds Write

In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution. Note: A different vulnerability than CVE-2019-1099...

CVE-2019-10987: Out-of-bounds Write

In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution...

CVE-2019-10985: Improper Limitation of a Pathname to a Restricted Directory

In WebAccess/SCADA, Versions 8.3.5 and prior, a path traversal vulnerability is caused by a lack of proper validation of a user-supplied path prior to use in file operations. An attacker can leverage this vulnerability to delete files while posing as an administrator...

CVE-2019-10993: Improper Restriction of Operations within the Bounds of a Memory Buffer

In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference vulnerabilities may allow a remote attacker to execute arbitrary code...

CVE-2019-10983: Out-of-bounds Read

In WebAccess/SCADA Versions 8.3.5 and prior, an out-of-bounds read vulnerability is caused by a lack of proper validation of user-supplied data. Exploitation of this vulnerability may allow disclosure of information...