Detections
Analytics
Advantech WebAccess < 7.0-2011.08.27 Multiple Vulnerabilities
high Nessus Network Monitor Plugin ID 9954
Synopsis
The detected version of Advantech WebAccess may be affected by multiple attack vectors.Description
The installed version of Advantech WebAccess is prior to 7.0-2011.08.27 and is affected by the following vulnerabilities :- An overflow condition exists in the bundled 'bwscript.dll' ActiveX control that is triggered as user-supplied input is not properly validated. With a specially crafted web page, a context-dependent attacker can cause a buffer overflow, potentially allowing the execution of arbitrary code.
- An overflow condition exists in the bundled 'webdobj.dll' ActiveX control that is triggered as user-supplied input is not properly validated. With a specially crafted web page, a context-dependent attacker can cause a buffer overflow, potentially allowing the execution of arbitrary code.
Solution
Upgrade to Advantech WebAccess version 7.0-2011.08.27 or later.See Also
http://advantech.vo.llnwd.net/o35/www/webaccess/WebAccess%208.0/Version%208.0.htm
http://webaccess.advantech.com/downloads/Release%20Notes%20Candidate.htm