CVE-2018-10591: Medium severity advantech webop vulnerability
In Advantech WebAccess versions V8.220170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an origin validation error vulnerability has been identified, which may allow an attacker can create a malicious web site, steal session cookies, and access data of authenticated users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10591?
CVE-2018-10591 is considered a medium severity vulnerability that exposes applications to potential security risks due to origin validation errors.
How do I fix CVE-2018-10591?
To fix CVE-2018-10591, upgrade to the latest version of Advantech WebAccess, WebAccess Dashboard, and WebAccess/NMS that are beyond the vulnerable versions specified.
What systems are affected by CVE-2018-10591?
CVE-2018-10591 affects Advantech WebAccess versions up to 8.2_20170817, WebAccess Dashboard up to 2.0.15, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS versions prior to 2.0.3.
What type of vulnerability is CVE-2018-10591?
CVE-2018-10591 is classified as an origin validation error vulnerability which can lead to unauthorized access or manipulation of web applications.
What are the potential impacts of CVE-2018-10591?
The potential impacts of CVE-2018-10591 include unauthorized access to sensitive information and possible manipulation of the control systems.