CVE-2019-10993

CVE-2019-10993 corresponds to multiple untrusted pointer dereference vulnerabilities in Advantech WebAccess/SCADA environments (and WebAccess Node viewsrv) that permit remote code execution. The connected ZDI advisories describe specific 0x27xx IOCTL/0x27E? interfaces in the webvrpcs process wher...

CVE-2019-10987

Summary of CVE-2019-10987 : The vulnerability affects Advantech WebAccess/SCADA (and related WebAccess Node components) prior to version 8.4.1, specifically in the webvrpcs/bwdraw components. It is caused by insufficient validation of the length of user-supplied data, leading to out-of-bounds wri...

CVE-2019-10991

Insight: CVE-2019-10991 corresponds to a stack-based buffer overflow in Advantech WebAccess/SCADA (and related WebAccess products) prior to version 8.3.6 where user-supplied data length is not properly validated before copying into a fixed-size buffer, enabling remote code execution. Connected ad...

CVE-2019-10989

Technical details for CVE-2019-10989 are not publicly available in the provided documents. Monitor for updates to affected product versions and mitigations.

CVE-2019-6550

Advantech WebAccess/SCADA CVE-2019-6550 affects version 8.3.5 and earlier, with multiple stack-based buffer overflow vulnerabilities caused by insufficient validation of user-supplied data length. Exploitation can lead to remote code execution. Documented vulnerable components include various exe...

CVE-2019-10983

CVE-2019-10983 affects Advantech WebAccess/SCADA versions 8.3.5 and earlier, with an out-of-bounds read in viewsrv.dll caused by improper validation of user-supplied data. This can disclose information. The ZDI advisory (ZDI-19-621) and related sources describe the vulnerability and indicate reme...

CVE-2019-10985

Advantech WebAccess/SCADA — CVE-2019-10985 affects versions 8.3.5 and earlier. Root cause: path traversal due to insufficient validation of a user-supplied path before file operations, enabling an attacker to delete files (as Administrator). Connected sources indicate remote exploitation potentia...

CVE-2019-6554

CVE-2019-6554 affects Advantech WebAccess/SCADA prior to 8.4.0. It is an improper access control vulnerability that may allow a remote attacker to cause a denial-of-service by abusing a command invocation path. The ZDI advisory details a flaw in UninstallWA.exe exposed via the 0x2711 IOCTL in the...

CVE-2019-6552

Advantech WebAccess/SCADA (WebAccess/SCADA) versions up to 8.3.5 are affected by CVE-2019-6552: multiple command injection vulnerabilities caused by insufficient validation of user-supplied data, potentially enabling remote code execution. Related advisories (ICS CISA ICSA-19-092-01) confirm affe...