March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – SNAKE Ransomware – Active IOCs
September 6, 2021
Rewterz Threat Alert – Maze Ransomware – Active IOCs
September 6, 2021
Rewterz Threat Alert – SNAKE Ransomware – Active IOCs
September 6, 2021
Rewterz Threat Alert – Maze Ransomware – Active IOCs
September 6, 2021
Severity
High
Analysis Summary
CVE-2021-38408
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of IOCTL 0x2711, which can be used to invoke BwFLApp.exe. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the Administrator.
Impact
- Code Execution
- Unauthorized Access
Affected Vendors
- Advantech
Affected Products
- WebAccess: Versions 9.02 and prior
Remediation
Refer to ICS-CERT advisory for the complete list of affected products and their respective patches at