PT-2018-9983 · Advantech · Advantech Webaccess Dashboard+3

Publicado 2018-05-15 · Atualizado 2019-10-09 · CVE-2018-10591

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess versions V8.2 20170817 and prior Advantech WebAccess versions V8.3.0 and prior Advantech WebAccess Dashboard versions V.2.0.15 and prior Advantech WebAccess Scada Node versions prior to 8.3.1 Advantech WebAccess/NMS versions 2.0.3 and prior

Description: An origin validation error issue has been identified, which may allow an attacker to create a malicious website, steal session cookies, and access data of authenticated users.

Recommendations: For Advantech WebAccess versions V8.2 20170817 and prior, update to a version later than V8.2 20170817. For Advantech WebAccess versions V8.3.0 and prior, update to a version later than V8.3.0. For Advantech WebAccess Dashboard versions V.2.0.15 and prior, update to a version later than V.2.0.15. For Advantech WebAccess Scada Node versions prior to 8.3.1, update to version 8.3.1 or later. For Advantech WebAccess/NMS versions 2.0.3 and prior, update to a version later than 2.0.3.

Correção

Origin Validation Error

Session Fixation

Enumeração de Fraquezas

CWE-346

CWE-384

Identificadores relacionados

CVE-2018-10591

Produtos afetados

Advantech Webaccess

Advantech Webaccess Dashboard

Advantech Webaccess Scada Node

Advantech Webaccess/Nms

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-10591 · Nota de Segurança
• http://securityfocus.com/bid/104190 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01 · Nota
• https://osv.dev/vulnerability/CVE-2018-10591 · Aviso do Fabricante