You are here

Advantech WebAccess (ICSA-18-135-01) – Product Used in the Water and Wastewater and Energy Sectors

Advantech WebAccess (ICSA-18-135-01) – Product Used in the Water and Wastewater and Energy Sectors

Created: Wednesday, May 16, 2018 - 16:08
Categories:
Cybersecurity

The NCCIC has released an advisory on vulnerabilities in Advantech WebAccess. Multiple versions of this product are affected. Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information from the host and/or target, execute arbitrary code, or delete files. Advantech has released Version 8.3.1 of WebAccess to address the reported vulnerabilities. The NCCIC also recommends a series of defensive measures to minimize the risk of exploitation of these vulnerabilities. NCCIC/ICS-CERT.