CVE-2017-12719
published 2017-11-06CVE-2017-12719: An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to…
PriorityP339high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
3.05%
85.9th percentile
An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to dereference a pointer within the program causing the application to become unavailable.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| advantech | webaccess | < 8.2_20170817 | 8.2_20170817 |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gjrx-76h3-49hj: An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8
ghsa_unreviewed·2022-05-13
CVE-2017-12719 [HIGH] CWE-476 GHSA-gjrx-76h3-49hj: An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8
An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to dereference a pointer within the program causing the application to become unavailable.
CISA ICS
Advantech WebAccess
cisa_ics·2017-11-02
Advantech WebAccess
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Advantech WebAccess
Last RevisedNovember 02, 2017
Alert CodeICSA-17-306-02
## CVSS v3 7.3
ATTENTION: Remotely exploitable/low skill level to exploit.
Vendor: Advantech
Equipment: WebAccess
Vulnerabilities: Stack-based Buffer Overflow, Untrusted Pointer Dereference
## AFFECTED PRODUCTS
The following versions of WebAccess, an HMI platform, are affected:
- WebAccess versions prior to V8.2_20170817
## IMPACT
Successful exploitation of these vulnerabilities may allow remote code execution.
## MITIGATION
Advantech has released a new version of WebAccess to address the report
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-11-06
Published