Test ID:	1.3.6.1.4.1.25623.1.0.106108
Category:	Web application abuses
Title:	Advantech WebAccess Multiple Vulnerabilities
Summary:	Advantech WebAccess is prone to multiple vulnerabilities.
Description:	Summary: Advantech WebAccess is prone to multiple vulnerabilities. Vulnerability Insight: Advantech WebAccess is prone to multiple vulnerabilities: Several ActiveX controls are intended for restricted use, but have been marked as safe-for-scripting. (CVE-2016-4525) A specially crafted DLL file can cause a buffer overflow. (CVE-2016-4528) A properly authenticated administrator can view passwords for other administrators. (CVE-2016-5810) Vulnerability Impact: A local attacker may insert and run arbitrary code on an affected system. A authenticated administrator may view passwords from other administrators. Affected Software/OS: WebAccess versions prior to 8.1_20160519 Solution: Upgrade to Version 8.1_20160519 or later CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-4525 https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01 Common Vulnerability Exposure (CVE) ID: CVE-2016-4528 Common Vulnerability Exposure (CVE) ID: CVE-2016-5810 http://www.zerodayinitiative.com/advisories/ZDI-16-429
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.