PT-2019-13413 · Advantech · Webaccess

Publicado 2019-09-18 · Atualizado 2020-10-16 · CVE-2019-13550

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WebAccess versions 8.4.1 and prior

Description The issue is related to improper authorization, which may allow an attacker to disclose sensitive information. It can also cause improper control of code generation, potentially leading to remote code execution or a system crash.

Recommendations For versions 8.4.1 and prior, update to a version later than 8.4.1 to resolve the issue.

Correção

RCE

Improper Authorization

Enumeração de Fraquezas

CWE-285

Identificadores relacionados

CVE-2019-13550

Produtos afetados

Webaccess

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-13550 · Aviso do Fabricante
• https://us-cert.gov/ics/advisories/icsa-19-260-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13550 · Nota de Segurança