Browse CVEs

CRITICAL 9.8 CVE-2017-16724 A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple instances of a vulnerability that… Webaccess 8.3+ Fix from $2,3002018-01-05 HIGH 7.5 CVE-2017-16728 An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow… Webaccess 8.3+ Fix from $1,9502018-01-05 HIGH 7.5 CVE-2017-16753 An Improper Input Validation issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows some inputs that may cause the progr… Webaccess 8.3+ Fix from $1,9502018-01-05 HIGH 7.5 CVE-2017-12719 An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute co… Webaccess 8.2_20170817+ Fix from $1,9502017-11-06 MEDIUM 6.3 CVE-2017-14016EPSS 16% A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The application lacks proper validation of… Webaccess 8.2_20170817+ Fix from $1,6002017-11-06 HIGH 7.8 CVE-2017-12705 A Heap-Based Buffer Overflow issue was discovered in Advantech WebOP. A maliciously crafted project file may be able to trigger a heap-based buffer o… Webop Mitigation only Fix from $1,9502017-10-25 HIGH 7.8 CVE-2017-12717 An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A maliciously crafted dll file place… Webaccess after 8.2 Fix from $1,9502017-08-30 CRITICAL 9.8 CVE-2017-12698 An Improper Authentication issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Specially crafted requests allow a possible a… Webaccess after 8.2 Fix from $2,3002017-08-30 CRITICAL 9.8 CVE-2017-12706 A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulne… Webaccess after 8.2 Fix from $2,3002017-08-30 CRITICAL 9.8 CVE-2017-12708 An Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered in Advantech WebAccess versions prior to V8.2_2017081… Webaccess after 8.2 Fix from $2,3002017-08-30 HIGH 8.8 CVE-2017-12702 An Externally Controlled Format String issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. String format specifiers based on… Webaccess after 8.2 Fix from $1,9502017-08-30 HIGH 8.8 CVE-2017-12704 A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulner… Webaccess after 8.2 Fix from $1,9502017-08-30 HIGH 7.8 CVE-2017-12711 An Incorrect Privilege Assignment issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A built-in user account has been grant… Webaccess after 8.2 Fix from $1,9502017-08-30 HIGH 7.8 CVE-2017-12713 An Incorrect Permission Assignment for Critical Resource issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Multiple files … Webaccess after 8.2 Fix from $1,9502017-08-30 HIGH 7.5 CVE-2017-12710 A SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. By submitting a specially crafted parameter, it is possi… Webaccess after 8.2 Fix from $1,9502017-08-30 HIGH 7.1 CVE-2017-7929 An Absolute Path Traversal issue was discovered in Advantech WebAccess Version 8.1 and prior. The absolute path traversal vulnerability has been iden… Webaccess after 8.1 Fix from $1,9502017-05-06 CRITICAL 9.8 CVE-2017-5154 An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed … Webaccess Mitigation only Fix from $2,3002017-02-13 CRITICAL 9.1 CVE-2017-5152 An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator (URL) on the web server, a malicious use… Webaccess Mitigation only Fix from $2,3002017-02-13 HIGH 7.8 CVE-2016-9353 An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The admin password is stored in the system and is encrypted with a stat… Susiaccess after 3.0 Fix from $1,9502017-02-13 HIGH 7.5 CVE-2016-9349EPSS 8% An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. An attacker could traverse the file system and extract files that can r… Susiaccess after 3.0 Fix from $1,9502017-02-13 HIGH 7.0 CVE-2016-9351 An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The directory traversal/file upload error allows an attacker to upload … Susiaccess after 3.0 Fix from $1,9502017-02-13 MEDIUM 5.0 CVE-2016-4528 Buffer overflow in Advantech WebAccess before 8.1_20160519 allows local users to cause a denial of service via a crafted DLL file. Webaccess after 8.1 Fix from $1,6002016-06-25 MEDIUM 6.6 CVE-2016-4525 Unspecified ActiveX controls in Advantech WebAccess before 8.1_20160519 allow remote authenticated users to obtain sensitive information or modify da… Webaccess after 8.1 Fix from $1,6002016-06-25 CRITICAL 9.8 CVE-2016-2275 The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on t… Vesp211 Eu Firmware Mitigation only Fix from $2,3002016-02-21 CRITICAL 9.8 CVE-2016-0859EPSS 8% Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of servi… Webaccess after 8.0 Fix from $2,3002016-01-15 HIGH 7.5 CVE-2016-0860EPSS 5% Buffer overflow in the BwpAlarm subsystem in Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service via a crafted RPC re… Webaccess after 8.0 Fix from $1,9502016-01-15 HIGH 8.1 CVE-2016-0858EPSS 5% Race condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via… Webaccess after 8.0 Fix from $1,9502016-01-15 CRITICAL 9.8 CVE-2016-0857EPSS 28% Multiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors. Webaccess after 8.0 Fix from $2,3002016-01-15 CRITICAL 9.8 CVE-2016-0856EPSS 17% Multiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors. Webaccess after 8.0 Fix from $2,3002016-01-15 HIGH 7.5 CVE-2016-0855 Directory traversal vulnerability in Advantech WebAccess before 8.1 allows remote attackers to list arbitrary virtual-directory files via unspecified… Webaccess after 8.0 Fix from $1,9502016-01-15