CVE-2017-16716 A SQL Injection issue was discovered in WebAccess versions prior to 8.3. WebAccess does not properly sanitize its inputs for SQL commands.
CriticalCVSS 9.8
EPSS 6.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
A SQL Injection issue was discovered in WebAccess versions prior to 8.3. WebAccess does not properly sanitize its inputs for SQL commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| advantech webaccess | < 8.3 | 8.3 |
References
- 102424 third-party-advisory vdb-entry
- ics-cert.us-cert.gov broken-link third-party-advisory us-government-resource
- 43928 exploit