VAR-201801-0152
Vulnerability from variot - Updated: 2025-12-22 23:48An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the program to use an invalid memory address, resulting in a program crash. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability.The specific flaw exists within the implementation of the 0x27e4 IOCTL in the webvrpcs process. An attacker can leverage this functionality to execute code under the context of Administrator. Advantech WebAccess is a suite of browser-based HMI/SCADA software from Advantech. The software supports dynamic graphical display and real-time data control, and provides the ability to remotely control and manage automation equipment. A denial of service vulnerability exists in versions prior to Advantech WebAccess 8.3. Advantech WebAccess is prone to the following security vulnerabilities: 1. Multiple denial-of-service vulnerabilities 2. Multiple stack-based buffer-overflow vulnerabilities 3. A directory-traversal vulnerability 4. An SQL-injection vulnerability 5. Multiple denial-of-service vulnerabilities An attacker can exploit these issues to execute arbitrary code in the context of the application, or modify data, or exploit latent vulnerabilities in the underlying database,perform certain unauthorized actions, gain unauthorized access and obtain sensitive information
Show details on source website{
"affected_products": {
"_id": null,
"data": [
{
"_id": null,
"model": "webaccess",
"scope": null,
"trust": 9.1,
"vendor": "advantech",
"version": null
},
{
"_id": null,
"model": "webaccess",
"scope": "lt",
"trust": 1.6,
"vendor": "advantech",
"version": "8.3"
},
{
"_id": null,
"model": "webaccess",
"scope": "eq",
"trust": 0.9,
"vendor": "advantech",
"version": "8.1"
},
{
"_id": null,
"model": "webaccess",
"scope": "eq",
"trust": 0.9,
"vendor": "advantech",
"version": "7.2"
},
{
"_id": null,
"model": "webaccess",
"scope": "eq",
"trust": 0.6,
"vendor": "advantech",
"version": "8.0"
},
{
"_id": null,
"model": "webaccess 8.2 20170330",
"scope": null,
"trust": 0.3,
"vendor": "advantech",
"version": null
},
{
"_id": null,
"model": "webaccess",
"scope": "eq",
"trust": 0.3,
"vendor": "advantech",
"version": "8.2"
},
{
"_id": null,
"model": "webaccess 8.1 20160519",
"scope": null,
"trust": 0.3,
"vendor": "advantech",
"version": null
},
{
"_id": null,
"model": "webaccess 8.0 20150816",
"scope": null,
"trust": 0.3,
"vendor": "advantech",
"version": null
},
{
"_id": null,
"model": "webaccess",
"scope": "eq",
"trust": 0.3,
"vendor": "advantech",
"version": "8"
},
{
"_id": null,
"model": "webaccess",
"scope": "ne",
"trust": 0.3,
"vendor": "advantech",
"version": "8.3"
},
{
"_id": null,
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "webaccess",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "e2e1079e-39ab-11e9-9b2b-000c29342cb1"
},
{
"db": "ZDI",
"id": "ZDI-18-035"
},
{
"db": "ZDI",
"id": "ZDI-18-012"
},
{
"db": "ZDI",
"id": "ZDI-18-020"
},
{
"db": "ZDI",
"id": "ZDI-18-038"
},
{
"db": "ZDI",
"id": "ZDI-18-039"
},
{
"db": "ZDI",
"id": "ZDI-18-031"
},
{
"db": "ZDI",
"id": "ZDI-18-021"
},
{
"db": "ZDI",
"id": "ZDI-18-011"
},
{
"db": "ZDI",
"id": "ZDI-18-022"
},
{
"db": "ZDI",
"id": "ZDI-18-014"
},
{
"db": "ZDI",
"id": "ZDI-18-036"
},
{
"db": "ZDI",
"id": "ZDI-18-015"
},
{
"db": "ZDI",
"id": "ZDI-18-032"
},
{
"db": "CNVD",
"id": "CNVD-2018-00673"
},
{
"db": "BID",
"id": "102424"
},
{
"db": "CNNVD",
"id": "CNNVD-201801-241"
},
{
"db": "NVD",
"id": "CVE-2017-16728"
}
]
},
"credits": {
"_id": null,
"data": "Steven Seeley (mr_me) of Offensive Security",
"sources": [
{
"db": "ZDI",
"id": "ZDI-18-035"
},
{
"db": "ZDI",
"id": "ZDI-18-012"
},
{
"db": "ZDI",
"id": "ZDI-18-020"
},
{
"db": "ZDI",
"id": "ZDI-18-038"
},
{
"db": "ZDI",
"id": "ZDI-18-039"
},
{
"db": "ZDI",
"id": "ZDI-18-031"
},
{
"db": "ZDI",
"id": "ZDI-18-021"
},
{
"db": "ZDI",
"id": "ZDI-18-011"
},
{
"db": "ZDI",
"id": "ZDI-18-022"
},
{
"db": "ZDI",
"id": "ZDI-18-014"
},
{
"db": "ZDI",
"id": "ZDI-18-036"
},
{
"db": "ZDI",
"id": "ZDI-18-015"
},
{
"db": "ZDI",
"id": "ZDI-18-032"
}
],
"trust": 9.1
},
"cve": "CVE-2017-16728",
"cvss": {
"_id": null,
"data": [
{
"cvssV2": [
{
"acInsufInfo": null,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "ZDI",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CVE-2017-16728",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "MEDIUM",
"trust": 9.1,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2017-16728",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CNVD-2018-00673",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "e2e1079e-39ab-11e9-9b2b-000c29342cb1",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "VHN-107679",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CVE-2017-16728",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "ZDI",
"id": "CVE-2017-16728",
"trust": 9.1,
"value": "MEDIUM"
},
{
"author": "nvd@nist.gov",
"id": "CVE-2017-16728",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "CNVD",
"id": "CNVD-2018-00673",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201801-241",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "IVD",
"id": "e2e1079e-39ab-11e9-9b2b-000c29342cb1",
"trust": 0.2,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-107679",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "e2e1079e-39ab-11e9-9b2b-000c29342cb1"
},
{
"db": "ZDI",
"id": "ZDI-18-035"
},
{
"db": "ZDI",
"id": "ZDI-18-012"
},
{
"db": "ZDI",
"id": "ZDI-18-020"
},
{
"db": "ZDI",
"id": "ZDI-18-038"
},
{
"db": "ZDI",
"id": "ZDI-18-039"
},
{
"db": "ZDI",
"id": "ZDI-18-031"
},
{
"db": "ZDI",
"id": "ZDI-18-021"
},
{
"db": "ZDI",
"id": "ZDI-18-011"
},
{
"db": "ZDI",
"id": "ZDI-18-022"
},
{
"db": "ZDI",
"id": "ZDI-18-014"
},
{
"db": "ZDI",
"id": "ZDI-18-036"
},
{
"db": "ZDI",
"id": "ZDI-18-015"
},
{
"db": "ZDI",
"id": "ZDI-18-032"
},
{
"db": "CNVD",
"id": "CNVD-2018-00673"
},
{
"db": "VULHUB",
"id": "VHN-107679"
},
{
"db": "CNNVD",
"id": "CNNVD-201801-241"
},
{
"db": "NVD",
"id": "CVE-2017-16728"
}
]
},
"description": {
"_id": null,
"data": "An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the program to use an invalid memory address, resulting in a program crash. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability.The specific flaw exists within the implementation of the 0x27e4 IOCTL in the webvrpcs process. An attacker can leverage this functionality to execute code under the context of Administrator. Advantech WebAccess is a suite of browser-based HMI/SCADA software from Advantech. The software supports dynamic graphical display and real-time data control, and provides the ability to remotely control and manage automation equipment. A denial of service vulnerability exists in versions prior to Advantech WebAccess 8.3. Advantech WebAccess is prone to the following security vulnerabilities:\n1. Multiple denial-of-service vulnerabilities\n2. Multiple stack-based buffer-overflow vulnerabilities\n3. A directory-traversal vulnerability\n4. An SQL-injection vulnerability\n5. Multiple denial-of-service vulnerabilities\nAn attacker can exploit these issues to execute arbitrary code in the context of the application, or modify data, or exploit latent vulnerabilities in the underlying database,perform certain unauthorized actions, gain unauthorized access and obtain sensitive information",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-16728"
},
{
"db": "ZDI",
"id": "ZDI-18-011"
},
{
"db": "ZDI",
"id": "ZDI-18-032"
},
{
"db": "ZDI",
"id": "ZDI-18-015"
},
{
"db": "ZDI",
"id": "ZDI-18-036"
},
{
"db": "ZDI",
"id": "ZDI-18-014"
},
{
"db": "ZDI",
"id": "ZDI-18-035"
},
{
"db": "ZDI",
"id": "ZDI-18-022"
},
{
"db": "ZDI",
"id": "ZDI-18-021"
},
{
"db": "ZDI",
"id": "ZDI-18-031"
},
{
"db": "ZDI",
"id": "ZDI-18-039"
},
{
"db": "ZDI",
"id": "ZDI-18-038"
},
{
"db": "ZDI",
"id": "ZDI-18-020"
},
{
"db": "ZDI",
"id": "ZDI-18-012"
},
{
"db": "CNVD",
"id": "CNVD-2018-00673"
},
{
"db": "BID",
"id": "102424"
},
{
"db": "IVD",
"id": "e2e1079e-39ab-11e9-9b2b-000c29342cb1"
},
{
"db": "VULHUB",
"id": "VHN-107679"
}
],
"trust": 10.17
},
"external_ids": {
"_id": null,
"data": [
{
"db": "NVD",
"id": "CVE-2017-16728",
"trust": 11.9
},
{
"db": "BID",
"id": "102424",
"trust": 2.6
},
{
"db": "ICS CERT",
"id": "ICSA-18-004-02",
"trust": 2.0
},
{
"db": "CNNVD",
"id": "CNNVD-201801-241",
"trust": 0.9
},
{
"db": "CNVD",
"id": "CNVD-2018-00673",
"trust": 0.8
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-5003",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-18-035",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-4959",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-18-012",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-4973",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-18-020",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-5006",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-18-038",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-5007",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-18-039",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-4999",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-18-031",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-4974",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-18-021",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-4958",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-18-011",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-4975",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-18-022",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-4961",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-18-014",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-5004",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-18-036",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-4962",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-18-015",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-5000",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-18-032",
"trust": 0.7
},
{
"db": "IVD",
"id": "E2E1079E-39AB-11E9-9B2B-000C29342CB1",
"trust": 0.2
},
{
"db": "VULHUB",
"id": "VHN-107679",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "e2e1079e-39ab-11e9-9b2b-000c29342cb1"
},
{
"db": "ZDI",
"id": "ZDI-18-035"
},
{
"db": "ZDI",
"id": "ZDI-18-012"
},
{
"db": "ZDI",
"id": "ZDI-18-020"
},
{
"db": "ZDI",
"id": "ZDI-18-038"
},
{
"db": "ZDI",
"id": "ZDI-18-039"
},
{
"db": "ZDI",
"id": "ZDI-18-031"
},
{
"db": "ZDI",
"id": "ZDI-18-021"
},
{
"db": "ZDI",
"id": "ZDI-18-011"
},
{
"db": "ZDI",
"id": "ZDI-18-022"
},
{
"db": "ZDI",
"id": "ZDI-18-014"
},
{
"db": "ZDI",
"id": "ZDI-18-036"
},
{
"db": "ZDI",
"id": "ZDI-18-015"
},
{
"db": "ZDI",
"id": "ZDI-18-032"
},
{
"db": "CNVD",
"id": "CNVD-2018-00673"
},
{
"db": "VULHUB",
"id": "VHN-107679"
},
{
"db": "BID",
"id": "102424"
},
{
"db": "CNNVD",
"id": "CNNVD-201801-241"
},
{
"db": "NVD",
"id": "CVE-2017-16728"
}
]
},
"id": "VAR-201801-0152",
"iot": {
"_id": null,
"data": true,
"sources": [
{
"db": "IVD",
"id": "e2e1079e-39ab-11e9-9b2b-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-00673"
},
{
"db": "VULHUB",
"id": "VHN-107679"
}
],
"trust": 1.4972832733333332
},
"iot_taxonomy": {
"_id": null,
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "e2e1079e-39ab-11e9-9b2b-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-00673"
}
]
},
"last_update_date": "2025-12-22T23:48:57.732000Z",
"patch": {
"_id": null,
"data": [
{
"title": "Advantech has issued an update to correct this vulnerability.",
"trust": 9.1,
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02"
},
{
"title": "Patch for Advantech WebAccess Denial of Service Vulnerability (CNVD-2018-00673)",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/113125"
},
{
"title": "Advantech WebAccess Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=77552"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-18-035"
},
{
"db": "ZDI",
"id": "ZDI-18-012"
},
{
"db": "ZDI",
"id": "ZDI-18-020"
},
{
"db": "ZDI",
"id": "ZDI-18-038"
},
{
"db": "ZDI",
"id": "ZDI-18-039"
},
{
"db": "ZDI",
"id": "ZDI-18-031"
},
{
"db": "ZDI",
"id": "ZDI-18-021"
},
{
"db": "ZDI",
"id": "ZDI-18-011"
},
{
"db": "ZDI",
"id": "ZDI-18-022"
},
{
"db": "ZDI",
"id": "ZDI-18-014"
},
{
"db": "ZDI",
"id": "ZDI-18-036"
},
{
"db": "ZDI",
"id": "ZDI-18-015"
},
{
"db": "ZDI",
"id": "ZDI-18-032"
},
{
"db": "CNVD",
"id": "CNVD-2018-00673"
},
{
"db": "CNNVD",
"id": "CNNVD-201801-241"
}
]
},
"problemtype_data": {
"_id": null,
"data": [
{
"problemtype": "CWE-476",
"trust": 1.1
},
{
"problemtype": "CWE-822",
"trust": 1.0
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-107679"
},
{
"db": "NVD",
"id": "CVE-2017-16728"
}
]
},
"references": {
"_id": null,
"data": [
{
"trust": 11.1,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-18-004-02"
},
{
"trust": 2.3,
"url": "http://www.securityfocus.com/bid/102424"
},
{
"trust": 0.3,
"url": "http://webaccess.advantech.com"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-18-035"
},
{
"db": "ZDI",
"id": "ZDI-18-012"
},
{
"db": "ZDI",
"id": "ZDI-18-020"
},
{
"db": "ZDI",
"id": "ZDI-18-038"
},
{
"db": "ZDI",
"id": "ZDI-18-039"
},
{
"db": "ZDI",
"id": "ZDI-18-031"
},
{
"db": "ZDI",
"id": "ZDI-18-021"
},
{
"db": "ZDI",
"id": "ZDI-18-011"
},
{
"db": "ZDI",
"id": "ZDI-18-022"
},
{
"db": "ZDI",
"id": "ZDI-18-014"
},
{
"db": "ZDI",
"id": "ZDI-18-036"
},
{
"db": "ZDI",
"id": "ZDI-18-015"
},
{
"db": "ZDI",
"id": "ZDI-18-032"
},
{
"db": "CNVD",
"id": "CNVD-2018-00673"
},
{
"db": "VULHUB",
"id": "VHN-107679"
},
{
"db": "BID",
"id": "102424"
},
{
"db": "CNNVD",
"id": "CNNVD-201801-241"
},
{
"db": "NVD",
"id": "CVE-2017-16728"
}
]
},
"sources": {
"_id": null,
"data": [
{
"db": "IVD",
"id": "e2e1079e-39ab-11e9-9b2b-000c29342cb1",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-18-035",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-18-012",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-18-020",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-18-038",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-18-039",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-18-031",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-18-021",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-18-011",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-18-022",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-18-014",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-18-036",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-18-015",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-18-032",
"ident": null
},
{
"db": "CNVD",
"id": "CNVD-2018-00673",
"ident": null
},
{
"db": "VULHUB",
"id": "VHN-107679",
"ident": null
},
{
"db": "BID",
"id": "102424",
"ident": null
},
{
"db": "CNNVD",
"id": "CNNVD-201801-241",
"ident": null
},
{
"db": "NVD",
"id": "CVE-2017-16728",
"ident": null
}
]
},
"sources_release_date": {
"_id": null,
"data": [
{
"date": "2018-01-10T00:00:00",
"db": "IVD",
"id": "e2e1079e-39ab-11e9-9b2b-000c29342cb1",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-035",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-012",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-020",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-038",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-039",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-031",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-021",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-011",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-022",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-014",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-036",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-015",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-032",
"ident": null
},
{
"date": "2018-01-10T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-00673",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "VULHUB",
"id": "VHN-107679",
"ident": null
},
{
"date": "2018-01-04T00:00:00",
"db": "BID",
"id": "102424",
"ident": null
},
{
"date": "2018-01-08T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201801-241",
"ident": null
},
{
"date": "2018-01-05T08:29:00.393000",
"db": "NVD",
"id": "CVE-2017-16728",
"ident": null
}
]
},
"sources_update_date": {
"_id": null,
"data": [
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-035",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-012",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-020",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-038",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-039",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-031",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-021",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-011",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-022",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-014",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-036",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-015",
"ident": null
},
{
"date": "2018-01-05T00:00:00",
"db": "ZDI",
"id": "ZDI-18-032",
"ident": null
},
{
"date": "2018-01-10T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-00673",
"ident": null
},
{
"date": "2019-10-09T00:00:00",
"db": "VULHUB",
"id": "VHN-107679",
"ident": null
},
{
"date": "2018-01-04T00:00:00",
"db": "BID",
"id": "102424",
"ident": null
},
{
"date": "2019-10-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201801-241",
"ident": null
},
{
"date": "2024-11-21T03:16:52.023000",
"db": "NVD",
"id": "CVE-2017-16728",
"ident": null
}
]
},
"threat_type": {
"_id": null,
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201801-241"
}
],
"trust": 0.6
},
"title": {
"_id": null,
"data": "Advantech WebAccess webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability",
"sources": [
{
"db": "ZDI",
"id": "ZDI-18-012"
},
{
"db": "ZDI",
"id": "ZDI-18-015"
}
],
"trust": 1.4
},
"type": {
"_id": null,
"data": "Code problem",
"sources": [
{
"db": "IVD",
"id": "e2e1079e-39ab-11e9-9b2b-000c29342cb1"
},
{
"db": "CNNVD",
"id": "CNNVD-201801-241"
}
],
"trust": 0.8
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…