✕
Request a Demo
Rewterz
Rewterz Threat Alert – SNAKE Ransomware – Active IOCs
September 6, 2021
Rewterz
Rewterz Threat Alert – Maze Ransomware – Active IOCs
September 6, 2021

Rewterz Threat Advisory – ICS: Advantech WebAccess BwFLApp Stack-based Buffer Overflow Remote Code Execution

Severity

High

Analysis Summary

CVE-2021-38408

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of IOCTL 0x2711, which can be used to invoke BwFLApp.exe. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the Administrator.

Impact

  • Code Execution
  • Unauthorized Access

Affected Vendors

  • Advantech

Affected Products

  • WebAccess: Versions 9.02 and prior

Remediation

Refer to ICS-CERT advisory for the complete list of affected products and their respective patches at

https://us-cert.cisa.gov/ics/advisories/icsa-21-245-03