CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-16753
https://notcve.org/view.php?id=CVE-2017-16753
05 Jan 2018 — An Improper Input Validation issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows some inputs that may cause the program to crash. Se ha descubierto un problema de validación incorrecta de entradas en Advantech WebAccess en versiones anteriores a la 8.3. WebAccess permite algunas entradas que podrían provocar que el programa se cierre inesperadamente. • http://www.securityfocus.com/bid/102424 • CWE-20: Improper Input Validation •
CVSS: 10.0EPSS: 27%CPEs: 1EXPL: 3CVE-2017-16720 – Advantech WebAccess DelIcon Directory Traversal File Deletion Vulnerability
https://notcve.org/view.php?id=CVE-2017-16720
05 Jan 2018 — A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within the directory structure of the target device. Se ha descubierto un problema de salto de directorio en WebAccess en versiones 8.3.2 y anteriores. Un atacante tiene acceso a archivos en la estructura de directorio del dispositivo objetivo. This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of Advantech WebAccess. • https://packetstorm.news/files/id/146743 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 9.8EPSS: 4%CPEs: 1EXPL: 2CVE-2017-16716 – Advantech WebAccess BWSCADASoap Login Method SQL Injection Authentication Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2017-16716
05 Jan 2018 — A SQL Injection issue was discovered in WebAccess versions prior to 8.3. WebAccess does not properly sanitize its inputs for SQL commands. Se ha descubierto un problema de inyección SQL en WebAccess en versiones anteriores a la 8.3. WebAccess no sanea adecuadamente sus entradas para comandos SQL. This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Advantech WebAccess. The specific flaw exists within processing of the Login method of the BWSCADASoap entry point.... • https://packetstorm.news/files/id/146149 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2017-16728 – Advantech WebAccess cnvlgxtag Untrusted Pointer Dereference Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2017-16728
05 Jan 2018 — An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the program to use an invalid memory address, resulting in a program crash. Se ha descubierto un problema de desreferencia de puntero no fiable en Advantech WebAccess en versiones anteriores a la 8.3. Hay múltiples vulnerabilidades que podrían permitir que un atacante haga que el programa emplee una dirección de memoria no válida, lo que r... • http://www.securityfocus.com/bid/102424 • CWE-476: NULL Pointer Dereference CWE-822: Untrusted Pointer Dereference •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2017-16724 – Advantech WebAccess BwSyncDb Stack-based Buffer Overflow Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2017-16724
05 Jan 2018 — A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple instances of a vulnerability that allows too much data to be written to a location on the stack. Se ha descubierto un problema de desbordamiento de búfer basado en pila en Advantech WebAccess en versiones anteriores a la 8.3. Existen múltiples instancias de una vulnerabilidad que permiten que demasiados datos se escriban en una ubicación de la pila. This vulnerability allows remote attackers t... • http://www.securityfocus.com/bid/102424 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-121: Stack-based Buffer Overflow •
CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0CVE-2017-12719 – Advantech WebAccess webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2017-12719
06 Nov 2017 — An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to dereference a pointer within the program causing the application to become unavailable. Se ha descubierto un problema de desreferencia de puntero no fiable en Advantech WebAccess en versiones anteriores a la V8.2_20170817. Un atacante remoto puede ejecutar código para desreferenciar un puntero en el programa, provocando que la aplicación deje de estar dis... • http://www.securityfocus.com/bid/101685 • CWE-476: NULL Pointer Dereference CWE-822: Untrusted Pointer Dereference •
CVSS: 6.8EPSS: 19%CPEs: 1EXPL: 2CVE-2017-14016 – Advantech WebAccess webvrpcs ViewDll1 Stack-based Buffer Overflow Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2017-14016
06 Nov 2017 — A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The application lacks proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could allow an attacker to execute arbitrary code under the context of the process. Se ha descubierto un problema de desbordamiento de búfer basado en pila en Advantech WebAccess en versiones anteriores a la V8.2_20170817. La aplicación no posee una validación adecuada de la lo... • https://packetstorm.news/files/id/145401 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-121: Stack-based Buffer Overflow •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2017-12717
https://notcve.org/view.php?id=CVE-2017-12717
30 Aug 2017 — An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A maliciously crafted dll file placed earlier in the search path may allow an attacker to execute code within the context of the application. Se descubrió un problema relacionado con un elemento de ruta de búsqueda no controlado en Advantech WebAccess en versiones anteriores a la V8.2_20170817. Un archivo dll manipulado de manera maliciosa ubicado previamente en la ruta de búsqueda puede permitir... • https://github.com/zi0Black/POC-CVE-2017-12615-or-CVE-2017-12717 • CWE-427: Uncontrolled Search Path Element •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2017-12708
https://notcve.org/view.php?id=CVE-2017-12708
30 Aug 2017 — An Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities that allow invalid locations to be referenced for the memory buffer, which may allow an attacker to execute arbitrary code or cause the system to crash. Se descubrió una vulnerabilidad en la que se restringe incorrectamente las operaciones dentro de los límites de un búfer de memoria en Advantech WebAccess... • http://www.securityfocus.com/bid/100526 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0CVE-2017-12706
https://notcve.org/view.php?id=CVE-2017-12706
30 Aug 2017 — A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could allow an attacker to execute arbitrary code under the context of the process. Se descubrió una vulnerabilidad de desbordamiento de búfer basado en pilas en Advantech WebAccess en versiones anteriores a la V8.2_201708... • http://www.securityfocus.com/bid/100526 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-121: Stack-based Buffer Overflow •