CVE-2019-6550: Advantech WebAccess Node makensis Stack-based Buffer Overflow Remote Code Execution Vulnerability
Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple stack-based buffer overflow vulnerabilities, caused by a lack of proper validation of the length of user-supplied data, may allow remote code execution.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within makensis.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs process. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of Administrator.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Advantech WebAccess Node vulnerability?
The vulnerability ID for this Advantech WebAccess Node vulnerability is CVE-2019-6550.
How severe is the CVE-2019-6550 vulnerability?
The severity of the CVE-2019-6550 vulnerability is critical with a CVSS score of 9.8.
What software is affected by the CVE-2019-6550 vulnerability?
The CVE-2019-6550 vulnerability affects Advantech WebAccess versions up to and including 8.3.5.
Is authentication required to exploit the CVE-2019-6550 vulnerability?
No, authentication is not required to exploit the CVE-2019-6550 vulnerability.
How can I fix the CVE-2019-6550 vulnerability?
To fix the CVE-2019-6550 vulnerability, it is recommended to update Advantech WebAccess to a version beyond 8.3.5 or apply any patches or security updates provided by the vendor.