CVE-2017-5154
N/A
N/A
Summary
An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software. Successful attack could result in administrative access to the application and its data files.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | Advantech WebAccess 8.1 | Advantech WebAccess 8.1 | affected |
Weaknesses
- Advantech WebAccess SQL injection
ADP Enrichment
CVE Program Container
Additional References
- https://www.tenable.com/security/research/tra-2017-04
- http://www.securityfocus.com/bid/95410
- https://ics-cert.us-cert.gov/advisories/ICSA-17-012-01
References
- https://www.tenable.com/security/research/tra-2017-04
- http://www.securityfocus.com/bid/95410
- https://ics-cert.us-cert.gov/advisories/ICSA-17-012-01
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.