CVE-2019-10987

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 8.3.5 and prior

Description The issue is related to multiple out-of-bounds write vulnerabilities in the webvrpcs process of Advantech WebAccess software due to insufficient validation of user-supplied data length. This can allow a remote attacker to execute arbitrary code by writing data beyond the boundaries of a allocated buffer.

Recommendations For versions 8.3.5 and prior, update to a version that addresses the out-of-bounds write vulnerabilities to prevent remote code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.