CVE-2017-12708 - An Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered in Advantech WebAccess versions prior to V8.2_20170817

Back Back to CVE browser

CRITICAL

An Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered in Advantech WebAccess versions prior to V8.2_20170817

Published Aug 30, 2017

9.8

CRITICAL

CVSS 3.0

EPSS 3.38%

Description

An Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities that allow invalid locations to be referenced for the memory buffer, which may allow an attacker to execute arbitrary code or cause the system to crash.

Affected products

Vendor n/a Product Advantech WebAccess Default
n/a
- Version
  Advantech WebAccess
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Advantech WebAccess

n/a

Version	Status	Constraints
Advantech WebAccess	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (3)

http://www.securityfocus.com/bid/100526
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-4247
Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/100526		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-4247		Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02		x_refsource_MISCThird Party AdvisoryUS Government Resource