This script is Copyright (C) 2011-2015 Tenable Network Security, Inc.
The remote host is running a service that is affected by remote code
execution and information disclosure vulnerabilities.
The Advantech / BroadWin WebAccess software installed on the remote
Windows host includes an RPC service (webvrpcs.exe) that listens
remotely on TCP port 4592. It is affected by two vulnerabilities :
- An overflow condition exists due to improper validation
of user-supplied input. An unauthenticated, remote
attacker can exploit this, via a specially crafted
request, to execute arbitrary code.
- An information disclosure vulnerability exists that
allows an unauthenticated, remote attacker to obtain the
security code value that protects the SCADA node via a
long string in an RPC request to TCP port 4592.
See also :
Upgrade to Advantech WebAccess 7.1 2013.05.30 or later.
Risk factor :
Critical / CVSS Base Score : 10.0
CVSS Temporal Score : 10.0
Public Exploit Available : true
Nessus Plugin ID: 56995 ()
Bugtraq ID: 47008
CVE ID: CVE-2011-4041
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.