CVE-2017-12717: High severity Advantech WebAccess vulnerability
Published Aug 30, 2017
·Updated
An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.220170817. A maliciously crafted dll file placed earlier in the search path may allow an attacker to execute code within the context of the application.
Affected Software
1 affected component
Advantech WebAccess<=8.2
Event History
Aug 30, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-12717?
CVE-2017-12717 is classified as a high severity vulnerability due to the potential for code execution by an attacker.
2
How do I fix CVE-2017-12717?
To fix CVE-2017-12717, upgrade Advantech WebAccess to version 8.2_20170817 or later.
3
What type of vulnerability is CVE-2017-12717?
CVE-2017-12717 is categorized as an Uncontrolled Search Path Element vulnerability.
4
What applications are affected by CVE-2017-12717?
CVE-2017-12717 affects Advantech WebAccess versions prior to 8.2_20170817.
5
Can CVE-2017-12717 be exploited remotely?
Yes, CVE-2017-12717 can be exploited remotely if an attacker can place a malicious DLL in the search path.