Not rated
CVE-2018-5443 A SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817
Description
A SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. WebAccess/SCADA does not properly sanitize its inputs for SQL commands.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Advantech WebAccess/SCADA | Versions not published |
References
- ics-cert.us-cert.gov ics-cert.us-cert.gov
- 102781 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Advantech WebAccess/SCADA
The 10 CVEs of Advantech WebAccess/SCADA →
CVE-2021-32954
Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to a directory traversal, which may allow an attacker…
Not rated
CVE-2021-32956
Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to redirection, which may allow an attacker to send a…
Not rated
CVE-2021-22669
Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA…
Not rated
CVE-2021-27436
WebAccess/SCADA Versions 9.0 and prior is vulnerable to cross-site scripting, which may allow an attacker to send…
Not rated