SB2020040813 - Multiple vulnerabilities in Advantech WebAccess/NMS
Published: April 8, 2020
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 8 secuirty vulnerabilities.
1) Arbitrary file upload (CVE-ID: CVE-2020-10621)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to insufficient validation of files during file upload. A remote attacker can upload and execute arbitrary file on the server.
2) SQL injection (CVE-ID: CVE-2020-10617)
The vulnerability allows a remote attacker to execute arbitrary SQL queries in database.
The vulnerability exists due to insufficient sanitization of user-supplied data. A remote attacker can send a specially crafted request to the affected application and gain access to sensitive information on the target system.
3) SQL injection (CVE-ID: CVE-2020-10623)
The vulnerability allows a remote attacker to execute arbitrary SQL queries in database.
The vulnerability exists due to insufficient sanitization of user-supplied data. A remote authenticted attacker can send a specially crafted request to the affected application and gain access to sensitive information on the target system.
4) Path traversal (CVE-ID: CVE-2020-10619)
The vulnerability allows a remote attacker to perform directory traversal attacks.
The vulnerability exists due to input validation error when processing directory traversal sequences. A remote attacker can send a specially crafted URL and delete files outside the application’s control.
5) Path traversal (CVE-ID: CVE-2020-10631)
The vulnerability allows a remote attacker to perform directory traversal attacks.
The vulnerability exists due to input validation error when processing directory traversal sequences. A remote attacker can send a specially crafted URL and delete or read files outside the application’s control.
6) Missing Authentication for Critical Function (CVE-ID: CVE-2020-10625)
The vulnerability allows a remote attacker to create a new admin account.
The vulnerability exists due to improper authentication. A remote attacker can create a new admin account.
7) XML External Entity injection (CVE-ID: CVE-2020-10629)
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to insufficient validation of user-supplied XML input. A remote attacker can pass a specially crafted XML code to the affected application and view contents of arbitrary files on the system or initiate requests to external systems.
Successful exploitation of the vulnerability may allow an attacker to view contents of arbitrary file on the server or perform network scanning of internal and external infrastructure.
8) OS Command Injection (CVE-ID: CVE-2020-10603)
The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.
The vulnerability exists due to the application does not properly sanitize user input. A remote authenticated attacker can execute arbitrary OS commands on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Remediation
Install update from vendor's website.