CVE-2019-10983: Advantech WebAccess Node viewsrv Out-Of-Bounds Read Information Disclosure Vulnerability
In WebAccess/SCADA Versions 8.3.5 and prior, an out-of-bounds read vulnerability is caused by a lack of proper validation of user-supplied data. Exploitation of this vulnerability may allow disclosure of information.
Other sources
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within viewsrv.dll, which is accessed through the 0x2722 IOCTL in the webvrpcs process. . The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the Administrator.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-10983 vulnerability?
CVE-2019-10983 is a vulnerability found in Advantech WebAccess Node that allows remote attackers to disclose sensitive information without authentication.
How severe is CVE-2019-10983 vulnerability?
The severity of CVE-2019-10983 vulnerability is high, with a CVSS severity score of 7.5.
What is affected by CVE-2019-10983 vulnerability?
CVE-2019-10983 vulnerability affects installations of Advantech WebAccess Node version up to 8.3.5.
How can CVE-2019-10983 vulnerability be exploited?
CVE-2019-10983 vulnerability can be exploited by accessing viewsrv.dll through the 0x2722 IOCTL in the webvrpcs protocol.
Is authentication required to exploit CVE-2019-10983 vulnerability?
No, authentication is not required to exploit CVE-2019-10983 vulnerability.