CVE-2019-6550

Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple stack-based buffer overflow vulnerabilities, caused by a lack of proper validation of the length of user-supplied data, may allow remote code execution.

Score

CVSS 3.1 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2019-04-05

Last modified

2024-08-04

Weaknesses

CWE-121, CWE-787

Affected products

• Webaccess (Advantech)
• Webaccessscada (Advantech)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-19-092-01
• https://www.zerodayinitiative.com/advisories/ZDI-19-585/