Webaccess

DATE	CVE	VULNERABILITY TITLE	RISK
2020-05-08	CVE-2020-12018	Out-of-bounds Read vulnerability in Advantech Webaccess Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. network low complexity advantech CWE-125	7.5
2020-05-08	CVE-2020-12014	SQL Injection vulnerability in Advantech Webaccess Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. network low complexity advantech CWE-89	7.5
2020-05-08	CVE-2020-12010	Path Traversal vulnerability in Advantech Webaccess Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. local low complexity advantech CWE-22	7.1
2020-05-08	CVE-2020-12006	Path Traversal vulnerability in Advantech Webaccess Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. network low complexity advantech CWE-22 critical	9.8
2020-05-08	CVE-2020-12002	Out-of-bounds Write vulnerability in Advantech Webaccess Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. network low complexity advantech CWE-787 critical	9.8
2020-05-08	CVE-2020-10638	Out-of-bounds Write vulnerability in Advantech Webaccess Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. network low complexity advantech CWE-787 critical	9.8
2020-04-01	CVE-2019-3942	Insufficiently Protected Credentials vulnerability in Advantech Webaccess 8.3.4 Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. network low complexity advantech CWE-522	7.5
2020-03-27	CVE-2020-10607	Out-of-bounds Write vulnerability in Advantech Webaccess In Advantech WebAccess, Versions 8.4.2 and prior. network low complexity advantech CWE-787	8.8
2019-12-12	CVE-2019-3951	Out-of-bounds Write vulnerability in Advantech Webaccess Advantech WebAccess before 8.4.3 allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service (memory corruption) due to a stack-based buffer overflow when handling IOCTL 70533 RPC messages. network low complexity advantech CWE-787 critical	9.8
2019-09-18	CVE-2019-13558	Code Injection vulnerability in Advantech Webaccess In WebAccess versions 8.4.1 and prior, an exploit executed over the network may cause improper control of generation of code, which may allow remote code execution, data exfiltration, or cause a system crash. network low complexity advantech CWE-94 critical	9.8