PT-2023-3044 · Advantech · Advantech Webaccess/Scada

Yangliu · Published 2023-05-18 · Updated 2023-06-12 · CVE-2023-32628

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Advantech WebAccss/SCADA versions 9.1.3 and prior

Description The issue is related to an arbitrary file upload vulnerability. This could allow an attacker to modify the file extension of a certificate file to ASP when uploading it, leading to remote code execution. The vulnerability is associated with unlimited upload of dangerous file types, which can be exploited by a remote attacker to execute arbitrary code.

Recommendations For Advantech WebAccss/SCADA versions 9.1.3 and prior, consider disabling the file upload feature until a patch is available to prevent exploitation. Restrict access to the certificate file upload module to minimize the risk of remote code execution. Avoid using the file upload feature for certificate files with ASP extensions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2023-03109

CVE-2023-32628

Affected Products

Advantech Webaccess/Scada

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-32628 · Security Note
• https://osv.dev/vulnerability/CVE-2023-32628 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03109 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-23-152-01 · Note
• https://t.me/cibsecurity/64996 · Telegram Post
• https://t.me/cvenotify/51820 · Telegram Post