PT-2019-13420 · Advantech · Webaccess

Published 2019-09-18 · Updated 2019-10-09 · CVE-2019-13558

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WebAccess versions 8.4.1 and prior

Description The issue allows for improper control of code generation, potentially enabling remote code execution, data exfiltration, or causing a system crash when an exploit is executed over the network.

Recommendations For versions 8.4.1 and prior, update to a version later than 8.4.1 to resolve the issue.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2019-13558

Affected Products

Webaccess

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-13558 · Security Note
• https://osv.dev/vulnerability/CVE-2019-13558 · Vendor Advisory
• https://us-cert.gov/ics/advisories/icsa-19-260-01 · Note