CVE-2019-3975: Buffer Overflow
Published Sep 10, 2019
·Updated
Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.1 allows a remote, unauthenticated attacker to execute arbitrary code via a crafted IOCTL 70603 RPC message.
Affected Software
1 affected component
Advantech WebAccess=8.4.1
Event History
Sep 10, 2019
CVE Published
via MITRE·03:55 PM
Data Sourced
via MITRE·03:55 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2019-3975?
CVE-2019-3975 is a stack-based buffer overflow vulnerability in Advantech WebAccess/SCADA 8.4.1.
2
How severe is CVE-2019-3975?
CVE-2019-3975 has a severity rating of critical with a severity value of 9.8.
3
How can an attacker exploit CVE-2019-3975?
An attacker can exploit CVE-2019-3975 by sending a crafted IOCTL 70603 RPC message to the affected system.
4
Who is affected by CVE-2019-3975?
Users of Advantech WebAccess/SCADA 8.4.1 are affected by CVE-2019-3975.
5
Is there a fix for CVE-2019-3975?
Yes, updating to a version of Advantech WebAccess/SCADA that is not affected by the vulnerability is the recommended fix for CVE-2019-3975.