ByteOS Network

NVD Vulnerability Details :

CVE-2019-10991

Analyzed

Source-ics-cert@hq.dhs.gov

Published At-28 Jun, 2019 | 21:15

Updated At-02 Mar, 2023 | 15:58

In WebAccess/SCADA, Versions 8.3.5 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Advantech (Advantech Co., Ltd.)

>>webaccess>>Versions up to 8.3.5(inclusive)

cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.us-cert.gov/ics/advisories/icsa-19-178-05	ics-cert@hq.dhs.gov	Third Party Advisory US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-19-586/	ics-cert@hq.dhs.gov	Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-19-588/	ics-cert@hq.dhs.gov	Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-19-589/	ics-cert@hq.dhs.gov	Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-19-592/	ics-cert@hq.dhs.gov	Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-19-594/	ics-cert@hq.dhs.gov	Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-19-619/	ics-cert@hq.dhs.gov	Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-19-620/	ics-cert@hq.dhs.gov	Third Party Advisory VDB Entry

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History