Advantech WebAccess 8.0 / 3.4.3 Code Execution

Discussion in 'News Aggregator' started by Packet Storm, 9 Sep 2015.

  1. Packet Storm

    Packet Storm Guest

    Using Advantech WebAccess SCADA Software and attacker can remotely manage industrial control systems devices like RTU's, generators, motors, etc. Attackers can execute code remotely by passing a maliciously crafted string to ConvToSafeArray API in ASPVCOBJLib.AspDataDriven ActiveX.

    Continue reading...
     

Share This Page

Loading...