What the vulnerability does

01Description

A SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. By submitting a specially crafted parameter, it is possible to inject arbitrary SQL statements that could allow an attacker to obtain sensitive information.

Key dates

02Disclosure timeline

August 30, 2017 CVE published
August 5, 2024 Record updated