PT-2017-12666 · Advantech · Advantech Webaccess

Published 2017-08-30 · Updated 2019-10-09 · CVE-2017-12717

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to V8.2 20170817

Description An issue was discovered that allows an attacker to execute code within the context of the application by using a maliciously crafted dll file placed earlier in the search path.

Recommendations For versions prior to V8.2 20170817, update to version V8.2 20170817 or later to resolve the issue.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2017-12717

Affected Products

Advantech Webaccess

References · 4

• https://osv.dev/vulnerability/CVE-2017-12717 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12717 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02 · Note
• http://securityfocus.com/bid/100526 · Note