Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0

In Advantech WebAccess, Versions 8.4.2 and prior

In WebAccess versions 8.4.1 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data

In WebAccess versions 8.4.1 and prior, multiple command injection vulnerabilities are caused by a lack of proper validation of user-supplied data and may allow arbitrary file…

In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are caused by a lack of proper validation of the length of user-supplied data

Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability

A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817

An Externally Controlled Format String issue was discovered in Advantech WebAccess versions prior to V8.2_20170817

Cross-site request forgery (CSRF) vulnerability in Advantech WebAccess before 8.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors

Race condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted request

Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code via vectors involving a browser plugin

SQL injection vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors

If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker…

WebAccess Node (All versions prior to 9.0.1) has incorrect permissions set for resources used by specific services, which may allow code execution with system privileges

WebAccess Versions 8.3.2 and prior

WebAccess Versions 8.3.2 and prior

Advantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which may allow an attacker to access those files and perform actions at a system…

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…

Advantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an attacker to run a malicious DLL file within the search path resulting in execution of…

An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.2_20170817

An Incorrect Permission Assignment for Critical Resource issue was discovered in Advantech WebAccess versions prior to V8.2_20170817

An Incorrect Privilege Assignment issue was discovered in Advantech WebAccess versions prior to V8.2_20170817

Advantech WebAccess version 9.1.3 contains an exposure of sensitive information to an unauthorized actor vulnerability that could leak user credentials

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0

Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files

In WebAccess/SCADA Versions 8.3.5 and prior, an out-of-bounds read vulnerability is caused by a lack of proper validation of user-supplied data

Advantech WebAccess 8.3.4 allows unauthenticated, remote attackers to delete arbitrary files via IOCTL 10005 RPC

Advantech WebAccess/SCADA, Versions 8.3.5 and prior

Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, which may allow an arbitrary file deletion…

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…

An Unrestricted Upload Of File With Dangerous Type issue was discovered in Advantech WebAccess versions prior to 8.3

An Improper Input Validation issue was discovered in Advantech WebAccess versions prior to 8.3

An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3

An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817

A SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.2_20170817

Buffer overflow in the BwpAlarm subsystem in Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service via a crafted RPC request

Directory traversal vulnerability in Advantech WebAccess before 8.1 allows remote attackers to list arbitrary virtual-directory files via unspecified vectors

Advantech WebAccess before 8.1 allows remote attackers to obtain sensitive information via crafted input

Advantech WebAccess before 8.1 allows remote attackers to bypass an intended administrative requirement and obtain file or folder access via unspecified vectors

Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service (out-of-bounds memory access) via unspecified vectors

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0

An Absolute Path Traversal issue was discovered in Advantech WebAccess Version 8.1 and prior