PT-2018-16961 · Advantech · Webaccess/Scada

Rgod · Publicado 2018-01-25 · Atualizado 2019-10-09 · CVE-2018-5445

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA versions prior to V8.2 20170817

Description A Path Traversal issue allows an attacker to have read access to files within the directory structure of the target device. This issue can potentially lead to remote code execution.

Recommendations For versions prior to V8.2 20170817, update to version V8.2 20170817 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-5445

ZDI-18-142

Produtos afetados

Webaccess/Scada

Referências · 5

• http://securityfocus.com/bid/102781 · Nota
• https://osv.dev/vulnerability/CVE-2018-5445 · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-18-023-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-5445 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-18-142 · Nota de Segurança