Advantech WebAccess/SCADA


基本信息

时间: 2019-01-24

风险等级: 未知

ICSA: ICS Advisory (ICSA-19-024-01)

厂商: Advantech

原地址: https://www.us-cert.gov/ics/advisories/ICSA-19-024-01


1. EXECUTIVE SUMMARY

  • CVSS v3 9.8
  • ATTENTION: Exploitable remotely/low skill level to exploit
  • Vendor: Advantech
  • Equipment: WebAccess/SCADA
  • Vulnerabilities: Improper Authentication, Authentication Bypass, SQL Injection

2. RISK EVALUATION

Successful exploitation of these vulnerabilities may allow an attacker to access and manipulate sensitive data.

3. TECHNICAL DETAILS