All versions before 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent could contain raw memory pointers for the server to use as-is. This could allow an malicious user to gain access to the remote file system and the ability to execute commands and overwrite files.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
advantech webaccess\\/scada |
Vulmon