Advantech WebAccess Buffer Overflow Vulnerability (CVE-2016-4528)

Advantech WebAccess Buffer Overflow Vulnerability (CVE-2016-4528)
Advantech WebAccess Buffer Overflow Vulnerability (CVE-2016-4528)

Release date:
Updated on:

Affected Systems:

Advantech WebAccess <8.1 _ 20160519

Description:

CVE (CAN) ID: CVE-2016-4528

WebAccess is a Web-based SCADA and Human-Machine Interface product.

DLL files constructed in versions earlier than WebAccess 8.1 _ 20160519 can trigger the buffer overflow vulnerability, allowing attackers to perform security attacks.

<* Source: Zhou Yu

Link: https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01
*>

Suggestion:

Vendor patch:

Advantech
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.advantech.com/industrial-automation/webaccess

This article permanently updates the link address: