Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A maliciously crafted dll file placed earlier in the search path may allow an attacker to execute code within the context of the application.
CVSS Information
N/A
Vulnerability Type
对搜索路径元素未加控制
Vulnerability Title
Advantech WebAccess 安全漏洞
Vulnerability Description
Advantech WebAccess是研华（Advantech）公司的一套基于浏览器架构的HMI/SCADA软件。该软件支持动态图形显示和实时数据控制，并提供远程控制和管理自动化设备的功能。 Advantech WebAccess 8.2_20170817之前的版本中存在安全漏洞。攻击者可借助被提前放置在搜索路径中恶意构建的dll文件利用该漏洞在应用程序的上下文中执行代码。
CVSS Information
N/A
Vulnerability Type
N/A