CVE-2016-4525

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.1 20160519

Description The issue is related to unspecified ActiveX controls and errors in the code of the Advantech WebAccess software. It may allow a remote authenticated user to obtain sensitive information or modify data. The exploitation is connected to the INTERFACESAFE FOR UNTRUSTED CALLER flag, which is related to safety for scripting.

Recommendations For Advantech WebAccess versions prior to 8.1 20160519, update to version 8.1 20160519 or later to resolve the issue. As a temporary workaround, consider restricting access to the ActiveX controls until a patch is applied.