Advantech WebAccess < 8.1_20160519 Multiple Vulnerabilities

Binary data 9960.prm...

Advantech WebAccess < 8.2_20161101 Multiple Vulnerabilities

Binary data 9961.prm...

Advantech WebAccess < 7.0-2011.08.27 Multiple Vulnerabilities

Binary data 9954.prm...

Advantech WebAccess < 7.0-2009.06.29 Multiple Vulnerabilities

Binary data 9952.prm...

Advantech WebAccess < 7.0-2011.12.20 Multiple Vulnerabilities

Binary data 9955.prm...

Advantech WebAccess < 7.0-2011.05.23 Multiple Vulnerabilities

Binary data 9953.prm...

Advantech WebAccess < 6.0-2008.06.06 Remote Authentication Bypass

Binary data 9951.prm...

Advantech WebAccess < 7.2-2013.11.14 Multiple Vulnerabilities

Binary data 9957.prm...

Advantech WebAccess < 7.2-2014.06.06 Multiple Vulnerabilities

Binary data 9958.prm...

Advantech WebAccess < 7.1-2013.05.30 Multiple Vulnerabilities

Binary data 9956.prm...

Advantech WebAccess

CVSS v3 7.1 ATTENTION: Low skill level to exploit Vendor: Advantech Equipment: WebAccess Vulnerability: DLL Hijacking AFFECTED PRODUCTS The following WebAccess, an HMI, versions are affected: Advantech WebAccess Versions 8.1 and prior. IMPACT Successful exploitation of this vulnerability could...

CVE-2017-5152

An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator URL on the web server, a malicious user is able to access pages unrestricted AUTHENTICATION BYPASS...

CVE-2017-5154

An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software. Successful attack could result in administrative access to the application and its data files...

CVE-2017-5152

An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator URL on the web server, a malicious user is able to access pages unrestricted AUTHENTICATION BYPASS...

CVE-2017-5154

An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software. Successful attack could result in administrative access to the application and its data files...

Sql injection

An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software. Successful attack could result in administrative access to the application and its data files...

CVE-2017-5152

An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator URL on the web server, a malicious user is able to access pages unrestricted AUTHENTICATION BYPASS...

CVE-2017-5154

An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software. Successful attack could result in administrative access to the application and its data files...

CVE-2017-5154

The CVE-2017-5154 issue affects Advantech WebAccess 8.1, where an SQL injection vulnerability exists in updateTemplate.aspx. The underlying flaw is insufficient input validation, enabling an attacker to craft inputs that could grant administrative access to the application and its data files. Pub...

CVE-2017-5152

Advantech WebAccess v8.1 contains an authentication bypass vulnerability accessible via a crafted URL, allowing unrestricted page access (CVE-2017-5152). Root cause is inadequate access control for web server resources, with CVSSv3.0 base score 9.1 (Network, Low attack complexity, no privileges r...