CVE-2020-12022

Name of the Vulnerable Software and Affected Versions Advantech WebAccess Node versions 8.4.4 and prior Advantech WebAccess Node version 9.0.0

Description An improper validation issue exists, allowing an attacker to inject specially crafted input into memory where it can be executed. This could potentially lead to remote code execution.

Recommendations For Advantech WebAccess Node versions 8.4.4 and prior, update to a version later than 8.4.4 to resolve the issue. For Advantech WebAccess Node version 9.0.0, consider disabling any functionality related to the improper validation of array indices until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.