This script is Copyright (C) 2011-2015 Tenable Network Security, Inc.
The remote host is running a service affected by remote code execution
and information disclosure vulnerabilities.
The Advantech / BroadWin WebAccess software installed on the remote
Windows host includes an RPC service (webvrpcs.exe) that listens
remotely on TCP port 4592 and reportedly is affected by two
- It suffers from a remote code execution vulnerability.
- It leaks the security code that protects the SCADA node.
Note that these vulnerabilities can reportedly be exploited by an
unauthenticated, remote attacker.
See also :
Advantech has released WebAccess 7.1 2013.05.30 to mitigate this
Risk factor :
Critical / CVSS Base Score : 10.0
CVSS Temporal Score : 10.0
Public Exploit Available : true
Nessus Plugin ID: 56995 ()
Bugtraq ID: 47008
CVE ID: CVE-2011-4041
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.