CVE-2017-12702: High severity Advantech WebAccess vulnerability
Published Aug 30, 2017
·Updated
An Externally Controlled Format String issue was discovered in Advantech WebAccess versions prior to V8.220170817. String format specifiers based on user provided input are not properly validated, which could allow an attacker to execute arbitrary code.
Affected Software
1 affected component
Advantech WebAccess<=8.2
Event History
Aug 30, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-12702?
CVE-2017-12702 has been classified as a high severity vulnerability due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2017-12702?
To fix CVE-2017-12702, update Advantech WebAccess to version V8.2_20170817 or later.
3
What systems are affected by CVE-2017-12702?
CVE-2017-12702 affects all versions of Advantech WebAccess prior to V8.2_20170817.
4
What type of vulnerability is CVE-2017-12702?
CVE-2017-12702 is an Externally Controlled Format String vulnerability.
5
Can CVE-2017-12702 be exploited remotely?
Yes, CVE-2017-12702 can be exploited remotely due to improper validation of user-provided input.