PT-2019-3571 · Advantech · Webaccess/Scada

Publicado 2019-04-02 · Atualizado 2020-10-16 · CVE-2019-6554

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA versions 8.3.5 and prior

Description The issue is related to improper access control, which may allow an attacker to cause a denial-of-service condition. This can be exploited by a remote attacker to disrupt service.

Recommendations For versions 8.3.5 and prior, update to a version later than 8.3.5 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific vulnerability.

Correção

DoS

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2019-03773

CVE-2019-6554

ZDI-19-331

Produtos afetados

Webaccess/Scada

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2019-6554 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-19-092-01 · Nota
• https://zerodayinitiative.com/advisories/ZDI-19-331 · Nota de Segurança
• https://us-cert.gov/ics/advisories/ICSA-19-092-01 · Nota
• https://osv.dev/vulnerability/CVE-2019-6554 · Aviso do Fabricante
• https://threatpost.ru/advantech-patches-critical-vulns-in-webaccess-scada/32103 · Nota
• https://bdu.fstec.ru/vul/2019-03773 · Nota de Segurança