You are here

Advantech WebAccess/SCADA (ICSA-18-352-02) – Products Used in the Water and Wastewater and Energy Sectors

Advantech WebAccess/SCADA (ICSA-18-352-02) – Products Used in the Water and Wastewater and Energy Sectors

Created: Thursday, December 20, 2018 - 12:43
Categories:
Cybersecurity

The NCCIC has published an advisory on an improper input validation vulnerability in Advantech WebAccess/SCADA. WebAccess/SCADA version 8.3.2 installed on Windows 2008 R2 SP1 is affected. Successful exploitation of this vulnerability could cause a stack buffer overflow condition. Advantech has released Version 8.3.4 of WebAccess/SCADA to address the reported vulnerability. The NCCIC also advises on a series of mitigating measures for these vulnerabilities. NCCIC/ICS-CERT.