CVE-2018-5443

A SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. WebAccess/SCADA does not properly sanitize its inputs for SQL commands.

Score

CVSS 3.0 5.3 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-01-25

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Webaccess/scada (Advantech)

References

• http://www.securityfocus.com/bid/102781
• https://ics-cert.us-cert.gov/advisories/ICSA-18-023-01