CVE-2017-5154

Critical

Published: 13/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A SQL injection vulnerability was discovered in Advantech WebAccess Version 8.1. To exploit this vulnerability, an attacker must supply malformed input to the WebAccess software.

Risk Assessment

A successful attack could result in administrative access to the application and its data files, posing a serious security threat to the organization.

Recommendation

It is recommended to update the software to the latest version and implement input validation to minimize the risk of SQL injection.

Original NVD description (English source)

An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software. Successful attack could result in administrative access to the application and its data files.