SB2018051607 - Multiple vulnerabilities in Advantech WebAccess
Published: May 16, 2018
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 13 secuirty vulnerabilities.
1) Buffer overflow (CVE-ID: CVE-2016-4528)
The vulnerability allows a local user to insert and run arbitrary code on an affected system.The vulnerability exists due to boundary error. A local user can cause a buffer overflow by sending a specially crafted a specially crafted DLL file to vulnerable server.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
2) Improper input validation (CVE-ID: CVE-2016-4525)
The vulnerability allow a local user to to insert and run arbitrary code on an affected system.This vulnerability ts not exploitable remotely and cannot be exploited without user interaction.
Successful exploitation of this vulnerability may lead to several ActiveX controls, which are intended for restricted use, can be marked as safe-for-scripting.
3) SQL injection (CVE-ID: CVE-2018-7501)
The vulnerability allows a remote attacker to execute arbitrary SQL commands in web application database.
The weakness exists due to insufficient sanitization of user-supplied data. A remote attacker can send a specially crafted HTTP request to vulnerable script and execute arbitrary SQL commands in web application database.
Successful exploitation of the vulnerability may allow an attacker to gain administrative access to vulnerable web application.
4) Information disclosure (CVE-ID: CVE-2018-10590)
The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.
The weakness exists due to improper directory listing control. A remote attacker can find important files that are not normally visible.
5) Improper authorization (CVE-ID: CVE-2018-7505)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The weakness exists in a TFTP application due to unrestricted file uploads to the web application without authorization. A remote attacker can bypass authorization and execute arbitrary code.
Successful exploitation of the vulnerability may result in system compromise.
6) Path traversal (CVE-ID: CVE-2018-7503)
The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.
The weakness exists due to path traversal. A remote attacker can gain access to potentially sensitive information.
7) Path traversal (CVE-ID: CVE-2018-10589)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The weakness exists due to path traversal. A remote attacker can execute arbitrary code.
Successful exploitation of the vulnerability may result in system compromise.
8) Stack-based buffer overflow (CVE-ID: CVE-2018-7499)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The weakness exists due to stack-based buffer overflow. A remote attacker can trigger memory corruption and execute arbitrary code.
Successful exploitation of the vulnerability may result in system compromise.
9) Heap-based buffer overflow (CVE-ID: CVE-2018-8845)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The weakness exists due to heap-based buffer overflow. A remote attacker can trigger memory corruption and execute arbitrary code.
Successful exploitation of the vulnerability may result in system compromise.
10) Untrusted pointer dereference (CVE-ID: CVE-2018-7497)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The weakness exists due to untrusted pointer dereference. A remote attacker can execute arbitrary code.
Successful exploitation of the vulnerability may result in system compromise.
11) External control of file name or path (CVE-ID: CVE-2018-7495)
The vulnerability allows a remote attacker to write arbitrary files on the target system.
The weakness exists due to external control of file name or path. A remote attacker can delete arbitrary files.
12) Origin validation error (CVE-ID: CVE-2018-10591)
The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.
The weakness exists due to origin validation error. A remote attacker can create a malicious web site, steal session cookies and access data of authenticated users.
13) Improper privilege management (CVE-ID: CVE-2018-8841)
The vulnerability allows a remote authenticated attacker to write arbitrary files on the target system.
The weakness exists due to improper privilege management. A remote attacker can modify files when read access should only be given to the user.
Remediation
Install update from vendor's website.