CVE-2017-12702

HIGH

Advantech Webaccess < 8.2 - Format String Vulnerability

Title source: rule
STIX 2.1

Description

An Externally Controlled Format String issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. String format specifiers based on user provided input are not properly validated, which could allow an attacker to execute arbitrary code.

References (2)

Scores

CVSS v3 8.8
EPSS 0.0043
EPSS Percentile 62.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-134
Status published
Products (2)
advantech/webaccess < 8.2
n/a/Advantech WebAccess Advantech WebAccess
Published Aug 30, 2017
Tracked Since Feb 18, 2026