Buffer overflow in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via a long string value in unspecified parameters.
📦
advantech_webaccess
Vendor: advantech
Actively Exploited
0
CISA KEV List
PoC / Exploits
4
Code Available
Total RCEs
2
Remote Access
Total CVEs
155
Total Indexed
Avg. EPSS
4.06%
Exploit Prob.
Security Vulnerability Index
Page 5 / 16
10.0
CVSS
Severity: HIGH
4.3
CVSS
Cross-site scripting (XSS) vulnerability in bwview.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Severity: MEDIUM
4.3
CVSS
Cross-site scripting (XSS) vulnerability in bwerrdn.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Severity: MEDIUM
7.5
CVSS
SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL commands via crafted string input.
Severity: HIGH