CVE-2017-12717

An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A maliciously crafted dll file placed earlier in the search path may allow an attacker to execute code within the context of the application.

Affected

Advantech WebAccess

CVSS v3.0 NVD

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

2.44% chance of exploitation in the next 30 days, 84th percentile

Published

2017-08-30

Updated

2024-08-05

Proof-of-concept exploits (1)

• zi0Black/POC-CVE-2017-12615-or-CVE-2017-127176★ · 2017-10-10

Security advisories

• http://www.securityfocus.com/bid/100526
• https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02

References

• CVE Record
• NVD entry

Related

• CVE-2017-12615
• CVE-2017-12617
• CVE-2018-0114