Detections
Analytics
Advantech WebAccess SQLi
critical Nessus Plugin ID 96876
Language:
Synopsis
The remote host is running a web application that is affected by a SQL injection vulnerability.Description
The Advantech WebAccess web server running on the remote host is affected by a SQL injection (SQLi) vulnerability in the WaExlViewer web application due to a failure to properly sanitize user-supplied input to the updateTemplate.aspx page. An authenticated, remote attacker can exploit this, via a series of crafted HTTP requests, to disclose passwords of administrative accounts used by Advantech WebAccess. Note that an attacker can also exploit this vulnerability without authentication by leveraging an existing authentication bypass vulnerability (CVE-2017-5152).Nessus has exploited the authentication bypass vulnerability (CVE-2017-5152) in order to exploit the SQLi vulnerability (CVE-2017-5154).
Solution
Upgrade to Advantech WebAccess version 8.2-2016.11.21 or later.See Also
https://www.tenable.com/security/research/tra-2017-04
Plugin Details
Severity: Critical
ID: 96876
File Name: scada_advantech_webaccess_cve-2017-5154.nbin
Version: 1.115
Type: remote
Family: SCADA
Published: 1/30/2017
Updated: 11/12/2024
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:advantech:webaccess
Required KB Items: scada_advantech_webaccess/auth_bypass
Exploit Available: true
Exploit Ease: Exploits are available
Exploited by Nessus: true
Patch Publication Date: 1/12/2017
Vulnerability Publication Date: 1/12/2017
Reference Information
CVE: CVE-2017-5154
BID: 95410