Improper access control in WebAccess/SCADA - CVE-2019-3941
Published: September 19, 2019
Vulnerability identifier: #VU21207
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-3941
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to the "webvrpcs.exe" accepts unauthenticated RPC calls to perform remote file operations including fopen, fseek, ftell, fread, fwrite, and fclose. A remote attacker can send a specially crafted IOCTL 10005 RPC call to the application, bypass implemented security restrictions and download arbitrary files from the remote host.
Affected software
WebAccess/SCADA
How to mitigate CVE-2019-3941
Install updates from vendor's website.
WebAccess/SCADA - update to 8.3.5