Advantech WebAccess Denial of Service Vulnerability (CVE-2017-16728)

Advantech WebAccess Denial of Service Vulnerability (CVE-2017-16728)
Advantech WebAccess Denial of Service Vulnerability (CVE-2017-16728)

Release date:
Updated on:

Affected Systems:

Advantech WebAccess <8.3

Description:

Bugtraq id: 102424
CVE (CAN) ID: CVE-2017-16728

WebAccess is a Web-based SCADA and Human-Machine Interface product.

A suspicious indirect pointer reference vulnerability exists in Advantech WebAccess versions earlier than 8.3. Successful exploitation can cause the execution of affected applications to crash.

<* Source: Steven Seeley (seeleymagic@hotmail.com)
Andrea Micalizzi
Zhou Yu
*>

Suggestion:

Vendor patch:

Advantech
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://webaccess.advantech.com
Https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02