Multiple SQL Injection Vulnerabilities in Advantech WebAccess

CVE-2018-7501 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, several SQL injection vulnerabilities have been identified, which may allow an attacker to disclose sensitive information from the host.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.