CVE-2019-13550: Critical severity advantech webop vulnerability
In WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an attacker to disclose sensitive information, cause improper control of generation of code, which may allow remote code execution or cause a system crash.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-13550?
The severity of CVE-2019-13550 is rated as critical with a severity value of 9.8.
What is the affected software for CVE-2019-13550?
The affected software for CVE-2019-13550 is Advantech WebAccess versions up to and including 8.4.1.
What is the vulnerability description of CVE-2019-13550?
CVE-2019-13550 is an improper authorization vulnerability in Advantech WebAccess versions 8.4.1 and prior that may allow an attacker to disclose sensitive information, cause improper control of code generation, or enable remote code execution.
How can this vulnerability be exploited?
This vulnerability can be exploited by an attacker to disclose sensitive information, control code generation, or execute remote code by exploiting the improper authorization in Advantech WebAccess versions 8.4.1 and prior.
Is there a fix available for CVE-2019-13550?
It is recommended to upgrade to a version of Advantech WebAccess that is newer than 8.4.1 to mitigate the vulnerability.