Vulnerabilities for Advantech studio (...) - CXSECURITY.COM

Vulnerabilities for 'Advantech studio'

2013-03-11

CVE-2013-1627

CWE-22

Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub_401A90 CreateFileW function.

2011-01-18

CVE-2011-0488

CWE-119

Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long request to TCP port 80.

2011-05-04

CVE-2011-0340

CWE-119

Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers to execute arbitrary code via a long (1) InternationalOrder, (2) InternationalSeparator, or (3) LogFileName property value; or (4) a long bstrFileName argument to the OpenScreen method.

>>> Vendor: Advantech 48 Products

Advantech studio

Adam opc server

Modbus rtu opc server

Modbus tcp opc server

Advantech webaccess

Eki-6340 firmware

Eki-1200 gateway series firmware

Eki-122x series firmware

Eki-1321 series firmware

Eki-1322 series firmware

Eki-1361 series firmware

Eki-1362 series firmware

Vesp211-232 firmware

Vesp211-eu firmware

Webaccess hmi designer

Webaccess dashboard

Webaccess/scada

Webaccess/hmi designer

Webaccess\/hmi designer

Webaccess\/scada

Webaccess scada

Deviceon\/iservice

Deviceon\/iedge

Copyright 2024, cxsecurity.com