RULE(RULE ID:713840)

Rule General Information
Release Date: 2019-12-23
Rule Name: Advantech WebAccess SCADA BwPAlarm IOCTL 70533 Stack-based Buffer Overflow Vulnerability (CVE-2019-3951)
Severity:
CVE ID:
Rule Protection Details
Description: Advantech WebAccess before 8.4.3 allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service (memory corruption) due to a stack-based buffer overflow when handling IOCTL 70533 RPC messages.
Impact: A buffer overflow vulnerability can be triggered by an attacker in the context of the vulnerable product. Further attacks includes arbitrary code execution and denial of service.
Affected OS: Windows, Others
Reference: https://www.tenable.com/security/research/tra-2019-52
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://www.advantech.com