CVE-2019-10989: Advantech WebAccess Node BwPAlarm CreateMonitoredItemEx Heap-based Buffer Overflow Remote Code Execution Vulnerability
In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution. Note: A different vulnerability than CVE-2019-10991.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x11372 IOCTL in the webvrpcs process. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code under the context of Administrator.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x113d1 IOCTL in the webvrpcs process. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code under the context of Administrator.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10989?
The severity of CVE-2019-10989 is critical with a CVSS score of 9.8.
How does CVE-2019-10989 affect Advantech WebAccess Node?
CVE-2019-10989 allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node without requiring authentication.
What is the specific flaw in CVE-2019-10989?
The specific flaw in CVE-2019-10989 exists within the implementation of the 0x113d1 IOCTL in the webvrpcs process, resulting in a heap-based buffer overflow.
Which versions of Advantech WebAccess are affected by CVE-2019-10989?
Versions of Advantech WebAccess up to and including 8.3.5 are affected by CVE-2019-10989.
How can CVE-2019-10989 be fixed?
To fix CVE-2019-10989, users should update to a version of Advantech WebAccess that is not vulnerable or apply the necessary security patches.