CVE-2018-15704

Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability by sending a crafted HTTP request to broadweb/system/opcImg.asp.

CVSS v3.0

8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

21.54% chance of exploitation in the next 30 days, 97th percentile

Published

2018-10-22

Updated

2024-09-16

Proof-of-concept exploits (1)

• https://www.tenable.com/security/research/tra-2018-33

References

• CVE Record
• NVD entry

Related

• CVE-2018-15703
• CVE-2018-15705
• CVE-2018-15691
• CVE-2018-15706
• CVE-2018-15687
• CVE-2018-15707