advantech webaccess 8.4.4 vulnerabilities and exploits

(subscribe to this query)

6.1

CVSSv3

Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard.

Advantech Webaccess 8.4.2 Advantech Webaccess 8.4.4

7.5

CVSSv3

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability exists that may allow access to unauthorized data.

Advantech Webaccess Advantech Webaccess 9.0.0

7.5

CVSSv3

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Input is not properly sanitized and may allow an malicious user to inject SQL commands.

Advantech Webaccess Advantech Webaccess 9.0.0

9.8

CVSSv3

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow a low privilege user to overwrite files outside the application’s control.

Advantech Webaccess Advantech Webaccess 9.0.0

8.8

CVSSv3

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow a low privilege user to overwrite files outside the application’s control.

Advantech Webaccess Advantech Webaccess 9.0.0

9.8

CVSSv3

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An improper validation vulnerability exists that could allow an malicious user to inject specially crafted input into memory where it can be executed.

Advantech Webaccess Advantech Webaccess 9.0.0

7.1

CVSSv3

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow an authenticated user to use a specially crafted file to delete files outside the application’s control.

Advantech Webaccess Advantech Webaccess 9.0.0

9.8

CVSSv3

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple heap-based buffer overflow vulnerabilities exist caused by a lack of proper validation of the length of user-supplied data, which may allow remote code execution.

Advantech Webaccess Advantech Webaccess 9.0.0

9.8

CVSSv3

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple stack-based buffer overflow vulnerabilities exist caused by a lack of proper validation of the length of user-supplied data, which may allow remote code execution.

Advantech Webaccess Advantech Webaccess 9.0.0

9.8

CVSSv3

WebAccess Node Version 8.4.4 and prior is vulnerable to a stack-based buffer overflow, which may allow an malicious user to remotely execute arbitrary code.

Advantech Webaccess

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook