PT-2017-12666 · Advantech · Advantech Webaccess

Publicado 2017-08-30 · Atualizado 2019-10-09 · CVE-2017-12717

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to V8.2 20170817

Description An issue was discovered that allows an attacker to execute code within the context of the application by using a maliciously crafted dll file placed earlier in the search path.

Recommendations For versions prior to V8.2 20170817, update to version V8.2 20170817 or later to resolve the issue.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2017-12717

Produtos afetados

Advantech Webaccess

Referências · 4

• https://osv.dev/vulnerability/CVE-2017-12717 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-12717 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02 · Nota
• http://securityfocus.com/bid/100526 · Nota