Advantech/BroadWin SCADA WebAccess Multiple Remote Security Vulnerabilities

Bugtraq ID:	47008
Class:	Unknown
CVE:	CVE-2011-4041
Remote:	Yes
Local:	No
Published:	Mar 23 2011 12:00AM
Updated:	Jan 09 2014 02:01AM
Credit:	Ruben Santamarta
Vulnerable:	Advantech Advantech/BroadWin SCADA WebAccess 7.0
Not Vulnerable:

Advantech/BroadWin SCADA WebAccess Multiple Remote Security Vulnerabilities

Advantech/BroadWin SCADA WebAccess is prone to multiple remote vulnerabilities including an information-disclosure issue and a remote code-execution issue.

An attacker can exploit these issues to execute arbitrary code and gain access to sensitive information. Other attacks may also be possible.

Advantech/BroadWin SCADA WebAccess 7.0 is vulnerable; other versions may also be affected.

Advantech/BroadWin SCADA WebAccess Multiple Remote Security Vulnerabilities

The following exploit code is available:

• /data/vulnerabilities/exploits/exploit_advantech.zip

Advantech/BroadWin SCADA WebAccess Multiple Remote Security Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Advantech/BroadWin SCADA WebAccess Multiple Remote Security Vulnerabilities

References:

• SCADA Trojans: Attacking the Grid + 0dayZ! (Ruben Santamarta)
  
• Vendor Homepage (Advantech)
  
• SCADA Trojans: Attacking the Grid + Advantech vulnerabilities (Reversemode )
  
• ICSA-11-094-02A ADVANTECH/BROADWIN WEBACCESS RPC VULNERABILITY (CERT)