Rewterz
Rewterz Threat Alert – Tofsee Malware – Active IOCs
October 13, 2023
Rewterz
Rewterz Threat Alert – Mirai DDoS Malware Variant Adds 13 New Payloads to Target Linux-Based Routers – Active IOCs
October 13, 2023

Rewterz Threat Advisory – ICS: Advantech WebAccess Vulnerability

Severity

Medium

Analysis Summary

CVE-2023-4215

Advantech WebAccess Version 9.1.3 could expose user credentials to an unauthorized actor. When configuring or modifying account information on the device, an unauthorized actor can use the Cloud Agent Debug service to capture user credentials.

Impact

  • Unauthorized Access

Indicators Of Compromise

CVE

  • CVE-2023-4215

Affected Vendors

Advantech

Affected Products

  • Advantech WebAccess: Version 9.1.3.

Remediation

Refer to CISA-CERT Advisory for the patch, upgrade, or suggested workaround information.

CISA-CERT Advisory