March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – Indicators of Compromise – New Contract Themed Malspam Phishing Campaign
April 2, 2019
Rewterz Threat Advisory – Apache HTTP Server Multiple Vulnerabilities
April 3, 2019
Rewterz Threat Alert – Indicators of Compromise – New Contract Themed Malspam Phishing Campaign
April 2, 2019
Rewterz Threat Advisory – Apache HTTP Server Multiple Vulnerabilities
April 3, 2019
Analysis Summary
CVE-2019-6552
Multiple command injection vulnerabilities, caused by a lack of proper validation of user-supplied data, may allow remote code execution.
CVE-2019-6550
Multiple stack-based buffer overflow vulnerabilities, caused by a lack of proper validation of the length of user-supplied data, may allow remote code execution.
CVE-2019-6554
An improper access control vulnerability may allow an attacker to cause a denial-of-service condition.
Impact
- Remote code execution
- Denial of service
Affected Vendors
Advantech
Affected Products
- WebAccess/SCADA
- WebAccess/SCADA Versions 8.3.5 and prior.
Remediation
Vendor has released version 8.4.0 of WebAccess/SCADA to address the reported vulnerabilities.
https://support.advantech.com/support/DownloadSRDetail_New.aspx?SR_ID=1-MS9MJV&Doc_Source=Download