CVE-2023-1437 CVE-2023-1437

What is CVE-2023-1437?

CVE-2023-1437 is a critical memory corruption vulnerability in Advantech WebAccess/SCADA, published on 2 Aug 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent could contain raw memory pointers for the server to use as-is. This could allow an attacker to gain access to the remote file system and the ability to execute commands and overwrite files.

Weakness: CWE-119, CWE-822

Which versions are affected by CVE-2023-1437?

It affects 1 product.

Products include Advantech Webaccess\/Scada.

How do I fix CVE-2023-1437?

No fix has been published for CVE-2023-1437 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2023-1437 being exploited?

There is no known exploitation of CVE-2023-1437 in the wild and no public exploit code.

Other vulnerabilities in Advantech WebAccess/SCADA

• CVE-2021-32943 Memory corruption in WebAccess/SCADA Critical 9.8
• CVE-2019-6519 Auth bypass in n/a Critical 9.8
• CVE-2019-6523 SQL injection in n/a Critical 9.8
• CVE-2021-22669 Privilege escalation in Advantech WebAccess/SCADA High 8.8
• CVE-2020-13554 Privilege escalation in Advantech High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-qv79-48vx-52fw.