This script is Copyright (C) 2011-2014 Tenable Network Security, Inc.
The remote host is running a service affected by remote code
execution and information disclosure vulnerabilities.
The Advantech WebAccess software installed on the remote Windows host
includes an RPC service (webvrpcs.exe) that listens remotely on TCP
port 4592 and reportedly is affected by two vulnerabilities :
- It suffers from a remote code execution vulnerability.
- It leaks the security code that protects the SCADA node.
Note that these vulnerabilities can reportedly be exploited by an
unauthenticated, remote attacker.
See also :
Advantech has released WebAccess 7.1 2013.05.30 to mitigate this
Risk factor :
Critical / CVSS Base Score : 10.0
CVSS Temporal Score : 10.0
Public Exploit Available : true