Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2017-16724: Advantech WebAccess before 8.3 can be crashed by excess data
CVE-2017-16724 · published 8 years ago
Summary
Versions of Advantech WebAccess earlier than 8.3 may allow more information to be placed into a temporary memory area than it can hold, which can cause the application to stop working or be taken over. This risk arises from several spots in the software where the size check is missing. Updating to version 8.3 or later removes the problem.
What to do
- Update advantech webaccess to version 8.3 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| advantech | webaccess |
< 8.3 cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:* |
Original advisory text
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple instances of a vulnerability that allows too much data to be written to a locatio...
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple instances of a vulnerability that allows too much data to be written to a location on the stack.
References
- http://www.securityfocus.com/bid/102424 Third Party Advisory VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02 Broken Link Third Party Advisory US Government Resource
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-121Stack-based Buffer Overflow
CWE-119Buffer Overflow
Timeline
Published5 Jan 2018
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-2017-16724 · NVD
Track software like this
Free during beta