March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – Tofsee Malware – Active IOCs
October 13, 2023
Rewterz Threat Alert – Mirai DDoS Malware Variant Adds 13 New Payloads to Target Linux-Based Routers – Active IOCs
October 13, 2023
Rewterz Threat Alert – Tofsee Malware – Active IOCs
October 13, 2023
Rewterz Threat Alert – Mirai DDoS Malware Variant Adds 13 New Payloads to Target Linux-Based Routers – Active IOCs
October 13, 2023
Severity
Medium
Analysis Summary
CVE-2023-4215
Advantech WebAccess Version 9.1.3 could expose user credentials to an unauthorized actor. When configuring or modifying account information on the device, an unauthorized actor can use the Cloud Agent Debug service to capture user credentials.
Impact
- Unauthorized Access
Indicators Of Compromise
CVE
- CVE-2023-4215
Affected Vendors
Advantech
Affected Products
- Advantech WebAccess: Version 9.1.3.
Remediation
Refer to CISA-CERT Advisory for the patch, upgrade, or suggested workaround information.