Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
MS-RPC:OF:ADVANTECH-WEBACS-BOF |
|---|---|
Severity |
Major |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
MS-RPC |
Keywords |
Advantech WebAccess Client bwswfcfg Stack-based Buffer Overflow |
Release Date |
2019/06/20 |
Update Number |
3182 |
Supported Platforms |
idp-4.1.110110609+, isg-3.5.141818+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
MS-RPC: Advantech WebAccess Client bwswfcfg Stack-based Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the Advantech WebAccess Client. A successful attack can lead to Buffer Overflow.
Extended Description
WebAccess Versions 8.3.2 and prior. The application fails to properly validate the length of user-supplied data, causing a buffer overflow condition that allows for arbitrary remote code execution.
Affected Products
- Advantech webaccess 8.3.2
References
- BugTraq: 105736
- CVE: CVE-2018-17910
- URL: https://ics-cert.us-cert.gov/advisories/ICSA-18-298-02