CVE-2019-3953: Buffer Overflow
Published Jun 18, 2019
·Updated
Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote, unauthenticated attacker to execute arbitrary code by sending a crafted IOCTL 10012 RPC call.
Affected Software
1 affected component
Advantech WebAccess=8.4.0
Event History
Jun 18, 2019
CVE Published
via MITRE·10:53 PM
Data Sourced
via MITRE·10:53 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-3953?
The severity of CVE-2019-3953 is critical with a CVSS score of 9.8.
2
How does CVE-2019-3953 impact Advantech WebAccess/SCADA 8.4.0?
CVE-2019-3953 allows a remote, unauthenticated attacker to execute arbitrary code on Advantech WebAccess/SCADA 8.4.0.
3
What is the vulnerability in CVE-2019-3953?
The vulnerability in CVE-2019-3953 is a stack-based buffer overflow.
4
How can an attacker exploit CVE-2019-3953?
An attacker can exploit CVE-2019-3953 by sending a crafted IOCTL 10012 RPC call.
5
Is a patch available for CVE-2019-3953?
It is recommended to refer to the vendor's security advisory for information on patches or mitigations for CVE-2019-3953.