CVE-2018-5445
published 2018-01-25CVE-2018-5445: A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. An attacker has read access to files within the directory…
PriorityP430medium5.3CVSS 3.0
AVNACLPRNUINSUCLINAN
EPSS
1.87%
76.7th percentile
A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. An attacker has read access to files within the directory structure of the target device.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| advantech | webaccess_scada | < 8.2_20170817 | 8.2_20170817 |
| advantech_webaccess | scada | — | — |
CVSS provenance
nvdv3.05.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Advantech WebAccess/SCADA
cisa_ics·2018-01-23
Advantech WebAccess/SCADA
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Advantech WebAccess/SCADA
Last RevisedJanuary 23, 2018
Alert CodeICSA-18-023-01
## CVSS v3 5.3
ATTENTION: Remotely exploitable/low skill level to exploit.
Vendor: Advantech
Equipment: WebAccess/SCADA
Vulnerabilities: Path Traversal, SQL Injection
## AFFECTED PRODUCTS
The following versions of WebAccess/SCADA, a SCADA software platform, are affected:
- WebAccess/SCADA versions prior to V8.2_20170817
## IMPACT
Successful exploitation of these vulnerabilities could allow sensitive information to be disclosed from the target or database without authentication.
## MITIGATION
GHSA
GHSA-3724-q3rh-j82p: A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8
ghsa_unreviewed·2022-05-13
CVE-2018-5445 [MEDIUM] CWE-22 GHSA-3724-q3rh-j82p: A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8
A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. An attacker has read access to files within the directory structure of the target device.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-01-25
Published