ID de Prueba:	1.3.6.1.4.1.25623.1.0.106108
Categoría:	Web application abuses
Título:	Advantech WebAccess Multiple Vulnerabilities
Resumen:	Advantech WebAccess is prone to multiple vulnerabilities.
Descripción:	Summary: Advantech WebAccess is prone to multiple vulnerabilities. Vulnerability Insight: Advantech WebAccess is prone to multiple vulnerabilities: Several ActiveX controls are intended for restricted use, but have been marked as safe-for-scripting. (CVE-2016-4525) A specially crafted DLL file can cause a buffer overflow. (CVE-2016-4528) A properly authenticated administrator can view passwords for other administrators. (CVE-2016-5810) Vulnerability Impact: A local attacker may insert and run arbitrary code on an affected system. A authenticated administrator may view passwords from other administrators. Affected Software/OS: WebAccess versions prior to 8.1_20160519 Solution: Upgrade to Version 8.1_20160519 or later CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-4525 https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01 Common Vulnerability Exposure (CVE) ID: CVE-2016-4528 Common Vulnerability Exposure (CVE) ID: CVE-2016-5810 http://www.zerodayinitiative.com/advisories/ZDI-16-429
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.