CVE-2018-8845
Critical
Description
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a heap-based buffer overflow vulnerability has been identified, which may allow an attacker to execute arbitrary code.
SeverityCritical
CVSS9.8
Exploit probability—
ProductAdvantech Webaccess
PublishedMay 15, 2018
First seenMay 15, 2018
Weakness typeCWE-122CWE-122
How to fix
Update
- advantech webaccess_scada8.3.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| advantech webaccess | v ≤ 8.2_20170817, v ≤ 8.3.0 | — |
| advantech webaccess_dashboard | v ≤ 2.0.15 | — |
| advantech webaccess_scada | v < 8.3.1 | 8.3.1 |
| advantech webaccess\/nms | v ≤ 2.0.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.