November 20, 2023
Severity Medium Analysis Summary Agent Tesla is a very popular spyware Trojan built for the.NET framework. Since its initial appearance in 2014, this has been deployed […]
Rewterz Threat Alert – Indicators of Compromise – New Contract Themed Malspam Phishing Campaign
April 2, 2019Rewterz Threat Advisory – Apache HTTP Server Multiple Vulnerabilities
April 3, 2019Rewterz Threat Alert – Indicators of Compromise – New Contract Themed Malspam Phishing Campaign
April 2, 2019Rewterz Threat Advisory – Apache HTTP Server Multiple Vulnerabilities
April 3, 2019
Analysis Summary
CVE-2019-6552
Multiple command injection vulnerabilities, caused by a lack of proper validation of user-supplied data, may allow remote code execution.
CVE-2019-6550
Multiple stack-based buffer overflow vulnerabilities, caused by a lack of proper validation of the length of user-supplied data, may allow remote code execution.
CVE-2019-6554
An improper access control vulnerability may allow an attacker to cause a denial-of-service condition.
Impact
- Remote code execution
- Denial of service
Affected Vendors
Advantech
Affected Products
- WebAccess/SCADA
- WebAccess/SCADA Versions 8.3.5 and prior.
Remediation
Vendor has released version 8.4.0 of WebAccess/SCADA to address the reported vulnerabilities.
https://support.advantech.com/support/DownloadSRDetail_New.aspx?SR_ID=1-MS9MJV&Doc_Source=Download