PT-2014-4654 · Advantech · Webaccess

Publicado 2014-07-18 · Atualizado 2025-10-06 · CVE-2014-2366

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 7.2

Description The issue allows remote authenticated users to discover credentials by reading the HTML source code of the upAdminPg.asp page.

Recommendations For versions prior to 7.2, update to version 7.2 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-316

CWE-200

Identificadores relacionados

CVE-2014-2366

ZDI-14-250

Produtos afetados

Webaccess

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2014-2366 · Nota de Segurança
• https://cisa.gov/news-events/ics-advisories/icsa-14-198-02 · Nota
• http://webaccess.advantech.com · Nota
• https://t.me/cveNotify/137542 · Publicação no Telegram
• http://ics-cert.us-cert.gov/advisories/ICSA-14-198-02 · Nota
• https://zerodayinitiative.com/advisories/ZDI-14-250 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2366 · Nota