PT-2017-12667

CVE-2017-12719

·

Published

2017-11-06

·

Updated

2019-10-09

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to V8.2 20170817
Description An Untrusted Pointer Dereference issue allows a remote attacker to execute code, causing the application to become unavailable. This issue can lead to remote code execution, making the system inaccessible.
Recommendations For versions prior to V8.2 20170817, update to version V8.2 20170817 or later to resolve the issue. As a temporary workaround, consider restricting access to the webvrpcs drawsrv service to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ZDI-17-939
ZDI-17-940
Found an issue in the description? Have something to add? Feel free to write us 👾