CVE-2018-10591
MEDIUMAdvantech WebAccess <8.3.1 - SSRF
Title source: llmDescription
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an origin validation error vulnerability has been identified, which may allow an attacker can create a malicious web site, steal session cookies, and access data of authenticated users.
Scores
CVSS v3
6.1
EPSS
0.0016
EPSS Percentile
36.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
Classification
CWE
CWE-346
CWE-384
Status
published
Affected Products (4)
advantech/webaccess
< 8.2_20170817
advantech/webaccess_dashboard
< 2.0.15
advantech/webaccess_scada
< 8.3.1
advantech/webaccess\/nms
< 2.0.3
Timeline
Published
May 15, 2018
Tracked Since
Feb 18, 2026