CVE Catalog

CVE-2017-12708

Critical
Published: Translated: NVD NIST

Summary

An Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities that allow invalid locations to be referenced for the memory buffer, which may allow an attacker to execute arbitrary code or cause the system to crash.

Risk Assessment

This vulnerability poses a risk of arbitrary code execution by an attacker, potentially leading to serious consequences for the integrity and availability of the system.

Recommendation

It is recommended to update Advantech WebAccess to version V8.2_20170817 or later to mitigate this vulnerability.

Original NVD description (English source)

An Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities that allow invalid locations to be referenced for the memory buffer, which may allow an attacker to execute arbitrary code or cause the system to crash.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS