Aleksey Osipov

The issue is related to an unrestricted file upload vulnerability. This vulnerability can be exploited by a remote attacker to modify files of any type. The vulnerability is associated with the `uploadImageCommon` function in the UploadAjaxAction script in the WebAccess Dashboard Viewer.

An issue was discovered where user credentials are sent to the web server in clear text. This may allow an attacker to discover the credentials if they are able to observe traffic between the web browser and the server. The vulnerability is related to the lack of protection for service data, which can be exploited by a remote attacker to obtain user credentials in unencrypted form by eavesdropping on traffic between the browser and the server.

The issue allows remote authenticated users to execute arbitrary SQL commands. This is due to insufficient protection of the SQL query structure during authentication, which enables SQL code injection. Exploitation of this issue may allow a remote attacker to execute arbitrary SQL commands and modify web server settings, accounts, and projects.

The issue is related to the external control of a file name or path in the Advantech WebAccess browser plugin, which can be exploited by a remote attacker to execute arbitrary code.

The issue is related to an XML external entity (XXE) vulnerability in the WebHMI server, which can be exploited by local users to cause a denial of service, resulting in CPU or network traffic consumption, or to read arbitrary files.

The issue concerns the use of weak encryption in the software, allowing local users to access sensitive information by reading a credential file.

The issue allows remote attackers to execute arbitrary SQL commands.

The issue allows remote attackers to cause a denial of service, resulting in the device transitioning to defect mode, which lasts until a hardware reset is performed. This is achieved by sending specially crafted PROFINET packets.

A cross-site request forgery (CSRF) issue affects the software, allowing remote attackers to hijack the authentication of victims via unknown vectors. The vulnerability is also described as affecting the embedded server of the Simatic S7-1200 programmable logic controller, specifically on port 80 TCP and port 443 TCP, enabling cross-site request forgery.

The issue allows remote attackers to cause a denial of service, resulting in a defect-mode transition, by sending crafted Profinet packets.

A cross-site scripting (XSS) issue exists in the integrated web server, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized access or control of the device.

The issue concerns the random-number generator, which lacks sufficient entropy. This weakness can be exploited by remote attackers to bypass cryptographic protection mechanisms and hijack sessions.

The issue affects the confidentiality and availability of the system, but details about the vectors used for exploitation are not specified. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

An issue exists in the way Microsoft Excel parses specially crafted XML files, allowing remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference. This is related to an XML External Entity (XXE) issue, which is an information disclosure vulnerability.

The issue is related to an XML External Entity (XXE) problem, where an XML document containing an external entity declaration in conjunction with an entity reference can be used to read arbitrary files. This occurs because of the way Microsoft Word parses specially crafted XML files containing external entities, leading to an information disclosure vulnerability.

The issue allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

The issue allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service through CPU and memory consumption. This is achieved via an XML external entity declaration in conjunction with an entity reference.

The issue allows remote attackers to obtain sensitive information or cause a denial of service by using a crafted project file.