PT-2020-12994 · Advantech · Advantech Webaccess Node

Z0Mb1E · Published 2020-05-08 · Updated 2021-09-23 · CVE-2020-12026

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Advantech WebAccess Node versions 8.4.4 and prior Advantech WebAccess Node version 9.0.0

Description Multiple relative path traversal vulnerabilities exist, allowing a low-privilege user to overwrite files outside the application's control. The issue affects the WebAccess/SCADA ViewSrv and DrawSrv, where an IOCTL 0x0000277d directory traversal remote code execution vulnerability is present.

Recommendations For Advantech WebAccess Node versions 8.4.4 and prior, consider restricting access to sensitive files and directories to minimize the risk of exploitation. For Advantech WebAccess Node version 9.0.0, restrict access to the vulnerable IOCTL 0x0000277d to prevent remote code execution. As a temporary workaround, consider disabling the DrawSrv and ViewSrv services until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Relative Path Traversal

Path traversal

Weakness Enumeration

CWE-23

CWE-22

Related Identifiers

CVE-2020-12026

ZDI-20-626

ZDI-20-627

Affected Products

Advantech Webaccess Node

References · 6

• https://osv.dev/vulnerability/CVE-2020-12026 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-20-627 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-626 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-12026 · Security Note
• https://us-cert.gov/ics/advisories/icsa-20-128-01 · Note
• https://t.me/cvenotify/3668 · Telegram Post