CVE-2018-18999 - WebAccess/SCADA, WebAccess/SCADA Version 8.3.2 installed on Windows 2008 R2 SP1

Back Back to CVE browser

HIGH

WebAccess/SCADA, WebAccess/SCADA Version 8.3.2 installed on Windows 2008 R2 SP1

Published Dec 19, 2018

7.3

HIGH

CVSS 3.1

EPSS 2.31%

Description

WebAccess/SCADA, WebAccess/SCADA Version 8.3.2 installed on Windows 2008 R2 SP1. Lack of proper validation of user supplied input may allow an attacker to cause the overflow of a buffer on the stack.

Affected products

Vendor n/a Product WebAccess/SCADA Default
n/a
- Version
  WebAccess/SCADA Version 8.3.2 installed on Windows 2008 R2 SP1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

WebAccess/SCADA

n/a

Version	Status	Constraints
WebAccess/SCADA Version 8.3.2 installed on Windows 2008 R2 SP1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-20

Improper Input Validation

CWE-787

Out-of-bounds Write

References (4)

http://www.securityfocus.com/bid/106245
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-10703
Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-352-02
x_refsource_MISCThird Party AdvisoryUS Government Resource
https://www.tenable.com/security/research/tra-2018-45
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/106245		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-10703		Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-352-02		x_refsource_MISCThird Party AdvisoryUS Government Resource
https://www.tenable.com/security/research/tra-2018-45		x_refsource_MISCThird Party Advisory