PT-2017-3591 · Advantech · Advantech Webaccess
Publicado
2017-08-04
·
Atualizado
2019-10-09
·
CVE-2017-16724
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Advantech WebAccess versions prior to 8.3
Description:
The issue is caused by a stack-based buffer overflow in the BwFreRPT component of Advantech WebAccess. This allows a remote attacker to execute arbitrary code as an administrator. The vulnerability is due to writing too much data to a location on the stack.
Recommendations:
For versions prior to 8.3, update to version 8.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable components until a patch is available. Avoid using functions or parameters that may trigger the buffer overflow until the issue is resolved.
Correção
Stack Overflow
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Advantech Webaccess