CVE-2018-17908 Security feature bypass in WebAccess Versions 8.3.2 and prior.
An attacker can execute arbitrary code with elevated privileges because the installer fails to re-enable User Account Control after installation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-17908?
CVE-2018-17908 is a high-severity vulnerability in Advantech Webaccess, published on 29 Oct 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
WebAccess Versions 8.3.2 and prior. During installation, the application installer disables user access control and does not re-enable it after the installation is complete. This could allow an attacker to run elevated arbitrary code.
Weakness: CWE-284
Which versions are affected by CVE-2018-17908?
It affects 1 product.
Products include Advantech Webaccess.
How do I fix CVE-2018-17908?
No fix has been published for CVE-2018-17908 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-17908 being exploited?
There is no known exploitation of CVE-2018-17908 in the wild and no public exploit code.
Other vulnerabilities in Advantech Webaccess
- CVE-2014-9208 Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attackers to execute arbitra
- CVE-2021-33023 Advantech WebAccess
- CVE-2021-38389 Advantech WebAccess
- CVE-2021-38408 Memory corruption in Advantech WebAccess
- CVE-2020-12019 Memory corruption in WebAccess Node
Sources
Also known as GHSA-phxp-pcmx-p36c.