NVD Vulnerability Detail

CVE-2020-10638

Summary	Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple heap-based buffer overflow vulnerabilities exist caused by a lack of proper validation of the length of user-supplied data, which may allow remote code execution.
Publication Date	May 8, 2020, 9:15 p.m.
Registration Date	Jan. 26, 2021, 11:50 a.m.
Last Update	Nov. 21, 2024, 1:55 p.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://www.us-cert.gov/ics/advisories/icsa-20-128-01	Third Party Advisory US Government Resource
2	https://www.zerodayinitiative.com/advisories/ZDI-20-593/	Third Party Advisory VDB Entry
3	https://www.zerodayinitiative.com/advisories/ZDI-20-599/	Third Party Advisory VDB Entry
4	https://www.zerodayinitiative.com/advisories/ZDI-20-600/	Third Party Advisory VDB Entry
5	https://www.zerodayinitiative.com/advisories/ZDI-20-603/	Third Party Advisory VDB Entry
6	https://www.zerodayinitiative.com/advisories/ZDI-20-616/	Third Party Advisory VDB Entry
7	https://www.zerodayinitiative.com/advisories/ZDI-20-621/	Third Party Advisory VDB Entry
8	https://www.us-cert.gov/ics/advisories/icsa-20-128-01	Third Party Advisory US Government Resource
9	https://www.zerodayinitiative.com/advisories/ZDI-20-621/	Third Party Advisory VDB Entry
10	https://www.zerodayinitiative.com/advisories/ZDI-20-616/	Third Party Advisory VDB Entry
11	https://www.zerodayinitiative.com/advisories/ZDI-20-603/	Third Party Advisory VDB Entry
12	https://www.zerodayinitiative.com/advisories/ZDI-20-600/	Third Party Advisory VDB Entry
13	https://www.zerodayinitiative.com/advisories/ZDI-20-599/	Third Party Advisory VDB Entry
14	https://www.zerodayinitiative.com/advisories/ZDI-20-593/	Third Party Advisory VDB Entry

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-787	境界外書き込み	https://cwe.mitre.org/data/definitions/787.html

JVN Vulnerability Information

Advantech WebAccess Node における境界外書き込みに関する脆弱性

Title	Advantech WebAccess Node における境界外書き込みに関する脆弱性
Summary	Advantech WebAccess Node には、境界外書き込みに関する脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	May 7, 2020, midnight
Registration Date	June 8, 2020, 5:05 p.m.
Last Update	June 8, 2020, 5:05 p.m.

Affected System

アドバンテック株式会社

WebAccess 8.4.4 およびそれ以前

WebAccess 9.0.0

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2020-10638	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10638
National Vulnerability Database (NVD)
2	CVE-2020-10638	https://nvd.nist.gov/vuln/detail/CVE-2020-10638

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-787	https://cwe.mitre.org/data/definitions/787.html

ベンダー情報

No	Name	URL
Advantech
1	Top Page	https://www.advantech.com/

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-20-128-01	https://www.us-cert.gov/ics/advisories/icsa-20-128-01
JVN
2	JVNVU#93292753	https://jvn.jp/vu/JVNVU93292753/

Change Log

No	Changed Details	Date of change
1	[2020年06月08日] 掲載	June 8, 2020, 5:05 p.m.