by Kastro
Paper/Archive/CVE-2020-12022

CVE-2020-12022

icscert — Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0.

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 76.8.768 × 2015.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An improper validation vulnerability exists that could allow an attacker to inject specially crafted input into memory where it can be executed.

Affected

ProductAffectedFixed inSource
Advantech WebAccess NodeWebAccess Node Version 8.4.4 and prior, WebAccess Node Version 9.0.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refus-cert.gov/ics/advisories/icsa-20-128-01refzerodayinitiative.com/advisories/ZDI-20-598