PT-2019-3571 · Advantech · Webaccess/Scada

Published 2019-04-02 · Updated 2020-10-16 · CVE-2019-6554

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA versions 8.3.5 and prior

Description The issue is related to improper access control, which may allow an attacker to cause a denial-of-service condition. This can be exploited by a remote attacker to disrupt service.

Recommendations For versions 8.3.5 and prior, update to a version later than 8.3.5 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific vulnerability.

Fix

DoS

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2019-03773

CVE-2019-6554

ZDI-19-331

Affected Products

Webaccess/Scada

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2019-6554 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-19-331 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6554 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-03773 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-19-092-01 · Note
• https://us-cert.gov/ics/advisories/ICSA-19-092-01 · Note
• https://threatpost.ru/advantech-patches-critical-vulns-in-webaccess-scada/32103 · Note