ByteOS Network

NVD Vulnerability Details :

CVE-2017-16732

Modified

Source-ics-cert@hq.dhs.gov

Published At-12 Jan, 2018 | 02:29

Updated At-09 Oct, 2019 | 23:25

A use-after-free issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows an unauthenticated attacker to specify an arbitrary address.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	6.5	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Primary	2.0	6.4	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:P

CPE Matches

Advantech (Advantech Co., Ltd.)

>>webaccess>>Versions before 8.3(exclusive)

cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-416	Primary	nvd@nist.gov
CWE-416	Secondary	ics-cert@hq.dhs.gov

References

Hyperlink	Source	Resource
https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02A	ics-cert@hq.dhs.gov	Third Party Advisory US Government Resource

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History