PT-2021-22103

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 9.02 and prior Description The issue is a stack-based buffer overflow that may allow an attacker to remotely execute code. Recommendations For Advantech WebAccess versions 9.02 and prior, update to a version later...

CVE-2021-38389: Stack-based Buffer Overflow

Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code...

CVE-2021-33023: Heap-based Buffer Overflow

Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code...

PT-2021-20022

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 9.02 and prior Description The issue is a heap-based buffer overflow that may allow an attacker to remotely execute code. Recommendations For Advantech WebAccess versions 9.02 and prior, update to a version later...

CVE-2021-38431

An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users...

CVE-2021-38431

An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users...

Design/Logic Flaw

An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users...

CVE-2021-38431

CVE-2021-38431 affects Advantech WebAccess SCADA (WebAccess/SCADA) versions 9.0.3 and earlier. An authenticated user can use API functions to disclose project names and paths from other users due to a missing authorization issue (CWE-862). The CVSS v3 base score is 4.3 (Network, Low attack comple...

PT-2021-22124

Name of the Vulnerable Software and Affected Versions Advantech WebAccess SCADA versions 9.0.3 and prior Description The issue allows an authenticated user to disclose project names and paths from other users using API functions. Recommendations For Advantech WebAccess SCADA versions 9.0.3 and...

CVE-2021-38431: Missing Authorization

An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users...

Advantech WebAccess SCADA Authorization Issues Vulnerability

Advantech WebAccess SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. An authorization issue vulnerability...

Advantech WebAccess Heap Buffer Overflow Vulnerability

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on browser architecture. A heap buffer overflow vulnerability exists in Advantech WebAccess 9.02 and earlier versions. An attacker could exploit this vulnerability to remotely execute code...

Advantech WebAccess Stack Buffer Overflow Vulnerability (CNVD-2021-80266)

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on browser architecture. A stack buffer overflow vulnerability exists in Advantech WebAccess 9.02 and earlier versions. An attacker could exploit this vulnerability to remotely execute code...

CVE-2021-38389

Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code...

CVE-2021-33023

Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code...

CVE-2021-38431

An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users...

Advantech WebAccess 授权问题漏洞

Advantech WebAccess SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. An authorization issue vulnerability...

Advantech WebAccess 缓冲区错误漏洞

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on browser architecture. A heap buffer overflow vulnerability exists in Advantech WebAccess 9.02 and earlier versions. An attacker could exploit this vulnerability to remotely execute code...

Advantech WebAccess 缓冲区错误漏洞

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on browser architecture. A stack buffer overflow vulnerability exists in Advantech WebAccess 9.02 and earlier versions. An attacker could exploit this vulnerability to remotely execute code...

Advantech WebAccess

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Advantech Equipment: WebAccess Vulnerabilities: Heap-based Buffer Overflow, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to...