2018-05-15 - CVE Archive

CVE-2018-11094 May 15, 19:29 CRITICAL POC THREAT Act Now

An issue was discovered on Intelbras NCLOUD 300 1.0 devices. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Ncloud 300 Firmware Intelbras

NVD Exploit-DB

CVSS 3.0

9.8

EPSS

35.6%

CVE-2018-8845 May 15, 22:29 CRITICAL Act Now

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Webaccess Webaccess Scada +3

NVD

CVSS 3.1

9.8

EPSS

5.8%

CVE-2018-7505 May 15, 22:29 CRITICAL Act Now

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation RCE Webaccess Webaccess Scada Webaccess Dashboard +2

NVD

CVSS 3.0

9.8

EPSS

2.9%

CVE-2018-7499 May 15, 22:29 CRITICAL Act Now

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow Webaccess Webaccess Scada +3

NVD

CVSS 3.1

9.8

EPSS

3.8%

CVE-2018-7497 May 15, 22:29 CRITICAL Act Now

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Webaccess Webaccess Scada Webaccess Dashboard Webaccess Nms +1

NVD

CVSS 3.0

9.8

EPSS

2.9%

CVE-2018-10589 May 15, 22:29 CRITICAL Act Now

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Path Traversal Webaccess Webaccess Scada Webaccess Dashboard +2

NVD

CVSS 3.0

9.8

EPSS

4.1%