CVE-2018-18999

Опубликовано: 19 дек. 2018

Источник: nvd

CVSS3: 7.3

CVSS2: 7.5

EPSS Низкий

Описание

WebAccess/SCADA, WebAccess/SCADA Version 8.3.2 installed on Windows 2008 R2 SP1. Lack of proper validation of user supplied input may allow an attacker to cause the overflow of a buffer on the stack.

Ссылки

http://www.securityfocus.com/bid/106245
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-352-02
Third Party Advisory
US Government Resource
https://www.tenable.com/security/research/tra-2018-45
Third Party Advisory
http://www.securityfocus.com/bid/106245
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-352-02
Third Party Advisory
US Government Resource
https://www.tenable.com/security/research/tra-2018-45
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:advantech:webaccess\/scada:8.3.2:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.00379

Низкий

7.3 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-20

CWE-787

Связанные уязвимости

GHSA-q9q3-g4f5-x6g7