Not rated
CVE-2017-12710 A SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.2_20170817
Description
A SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. By submitting a specially crafted parameter, it is possible to inject arbitrary SQL statements that could allow an attacker to obtain sensitive information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Advantech WebAccess | Versions not published |
References
- www.tenable.com www.tenable.com
- ics-cert.us-cert.gov ics-cert.us-cert.gov
- 100526 www.securityfocus.com
- www.zerodayinitiative.com www.zerodayinitiative.com
Timeline
- Published
- Last modified
Other CVEs of Advantech WebAccess
The 22 CVEs of Advantech WebAccess →
CVE-2021-38408
A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper…
Not rated
CVE-2019-3942
Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files
Not rated
CVE-2020-10607
In Advantech WebAccess, Versions 8.4.2 and prior
Not rated
CVE-2017-16732
A use-after-free issue was discovered in Advantech WebAccess versions prior to 8.3
Not rated