Input validation

2020-05-0812:15:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.6%

JSON

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An improper validation vulnerability exists that could allow an attacker to inject specially crafted input into memory where it can be executed.

CPENameOperatorVersion
webaccesseq9.0.0
webaccessle8.4.4

CPE	Name	Operator	Version
	webaccess	eq	9.0.0
	webaccess	le	8.4.4

References

www.us-cert.gov/ics/advisories/icsa-20-128-01

www.zerodayinitiative.com/advisories/ZDI-20-598/