Vulnerabilities > CVE-2018-15704 - Out-of-bounds Write vulnerability in Advantech Webaccess

047910
CVSS 9.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
advantech
CWE-787
critical

Summary

Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability by sending a crafted HTTP request to broadweb/system/opcImg.asp.

Vulnerable Configurations

Part Description Count
Application
Advantech
159

Common Weakness Enumeration (CWE)