PT-2012-2431 · Advantech · Webaccess

Publicado 2012-02-21 · Atualizado 2018-01-05 · CVE-2012-0240

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WebAccess versions prior to 7.0

Description The issue is related to improper authentication in the GbScriptAddUp.asp file, allowing remote attackers to execute arbitrary code.

Recommendations For versions prior to 7.0, update to version 7.0 or later to resolve the issue.

Correção

RCE

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2012-0240

Produtos afetados

Webaccess

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-0240 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0240 · Nota
• http://securityfocus.com/bid/52051 · Nota
• http://us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf · Correção