CVE-2019-6550: Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple stack-based buffer overflow vulnerabilities, caused by a lack of proper validation of the length…

PriorityP263critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

6.09%

92.5th percentile

Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple stack-based buffer overflow vulnerabilities, caused by a lack of proper validation of the length of user-supplied data, may allow remote code execution.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
advantech	webaccess	<= 8.3.5	—
advantech	webaccess_scada	—	—

Detection & IOCsextracted from sources · hover to see the quote

→CVE-2019-6550 affects Advantech WebAccess/SCADA versions 8.3.5 and prior; target stack-based buffer overflow via user-supplied data length validation bypass enabling remote code execution ↗
→Vulnerability is exploitable remotely with low skill level required; no authentication context specified (CVSS PR:N, UI:N), making it suitable for network-based detection of anomalous oversized input to WebAccess/SCADA services ↗
→No known public exploits were identified at time of advisory publication; monitor for novel exploitation attempts against WebAccess/SCADA network-exposed services ↗

·Affected versions are WebAccess/SCADA 8.3.5 and prior; version 8.4.0 is the patched release. Detection rules should scope to these version ranges. ↗
·CVSS v3 score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating fully unauthenticated network exploitation with no user interaction — detection posture should treat any unexpected traffic to WebAccess/SCADA as high priority ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.