CVE-2018-7501CWE-89

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada…

published May 15, 2018

CVSS
—
EPSS
2%
Percentile
75.8
In the wild
Unconfirmed
What it is

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, several SQL injection vulnerabilities have been identified, which may allow an attacker to disclose sensitive information from the host.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01617 · 75.8th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2018-05-15T22:00Z
EPSS history
Timeline
  • 15 MAY 22:00Z
    In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada…
    cvelistv5