PT-2019-13413 · Advantech · Webaccess

Published 2019-09-18 · Updated 2020-10-16 · CVE-2019-13550

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WebAccess versions 8.4.1 and prior

Description The issue is related to improper authorization, which may allow an attacker to disclose sensitive information. It can also cause improper control of code generation, potentially leading to remote code execution or a system crash.

Recommendations For versions 8.4.1 and prior, update to a version later than 8.4.1 to resolve the issue.

Fix

RCE

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2019-13550

Affected Products

Webaccess

References · 3

• https://osv.dev/vulnerability/CVE-2019-13550 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13550 · Security Note
• https://us-cert.gov/ics/advisories/icsa-19-260-01 · Note