Advantech

Webaccess

103 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2016-5810

  • EPSS 25.4%
  • Veröffentlicht 02.05.2017 14:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

upAdminPg.asp in Advantech WebAccess before 8.1_20160519 allows remote authenticated administrators to obtain sensitive password information via unspecified vectors.

9.1

CVE-2017-5152

  • EPSS 1.31%
  • Veröffentlicht 13.02.2017 21:59:02
  • Zuletzt bearbeitet 20.04.2025 01:37:25

An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access pages unrestricted (AUTHENTICATION BYPASS).

9.8

CVE-2017-5154

  • EPSS 0.53%
  • Veröffentlicht 13.02.2017 21:59:02
  • Zuletzt bearbeitet 20.04.2025 01:37:25

An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software. Successful attack could result in administrative access to the appli...

5

CVE-2016-4528

  • EPSS 0.14%
  • Veröffentlicht 25.06.2016 01:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Buffer overflow in Advantech WebAccess before 8.1_20160519 allows local users to cause a denial of service via a crafted DLL file.

6.6

CVE-2016-4525

  • EPSS 0.19%
  • Veröffentlicht 25.06.2016 01:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Unspecified ActiveX controls in Advantech WebAccess before 8.1_20160519 allow remote authenticated users to obtain sensitive information or modify data via unknown vectors, related to the INTERFACESAFE_FOR_UNTRUSTED_CALLER (aka safe for scripting) fl...

10

CVE-2016-0859

  • EPSS 1.79%
  • Veröffentlicht 15.01.2016 03:59:21
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted RPC request.

10

CVE-2016-0860

  • EPSS 1.28%
  • Veröffentlicht 15.01.2016 03:59:21
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Buffer overflow in the BwpAlarm subsystem in Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service via a crafted RPC request.

9.3

CVE-2016-0858

  • EPSS 1.15%
  • Veröffentlicht 15.01.2016 03:59:20
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Race condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted request.

10

CVE-2016-0857

  • EPSS 8.21%
  • Veröffentlicht 15.01.2016 03:59:19
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors.

10

CVE-2016-0856

  • EPSS 60.94%
  • Veröffentlicht 15.01.2016 03:59:18
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors.