medium5.4Public exploit code
CVE-2018-15707
Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Advantech WebAccess SCADA 8.3.2 - Remote Code Execution2018-11-05 · webapps · asp
Impact
Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page. An attacker could leverage this vulnerability to disclose credentials amongst other things.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advantech | Webaccess | Versions 8.3.1, 8.3.2 |