PT-2020-2041 · Advantech · Advantech Webaccess

Peter Cheng · Published 2020-03-23 · Updated 2020-04-01 · CVE-2020-10607

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 8.4.2 and prior

Description A stack-based buffer overflow vulnerability is caused by a lack of proper validation of the length of user-supplied data, which may allow remote code execution. This issue is related to the lack of proper input validation, allowing an attacker to potentially execute arbitrary code remotely.

Recommendations For Advantech WebAccess versions 8.4.2 and prior, update to a version later than 8.4.2 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

BDU:2020-01678

CVE-2020-10607

Affected Products

Advantech Webaccess

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-10607 · Security Note
• https://osv.dev/vulnerability/CVE-2020-10607 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-01678 · Security Note
• https://t.me/cibsecurity/10808 · Telegram Post
• https://t.me/cvenotify/2223 · Telegram Post
• https://us-cert.gov/ics/advisories/icsa-20-086-01 · Note