Advantech Update
2557Warning Date
Severity Level
Warning Number
Target Sector
8 April, 2020
● Critical
2020-1112
Energy - Water and Utilities - Manufacturing
Description:
Advantech has released a security update to address several vulnerabilities in the following product:
- WebAccess/NMS versions prior to 3.0.2
Threats:
Attacker could exploit this vulnerability by doing the following:
- SQL injection
- Commands injections -remotely
- Unauthorized disclosure of information
- Create a new admin account
Best practice and Recommendations:
The CERT team encourages users to review Advantech security advisory and apply the necessary updates: