HIGH

CVE-2018-15704

CVSS v3

8.8

HIGH

EPSS Score

12.6%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability by sending a crafted HTTP request to broadweb/system/opcImg.asp.

Technical details

Published
10/22/2018

Frequently asked questions

What is CVE-2018-15704?

Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability by sending a crafted HTTP request to broadweb/system/opcImg.asp.

Is CVE-2018-15704 actively exploited?

Active exploitation of CVE-2018-15704 has not been confirmed. The EPSS score is 12.6%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2018-15704?

CVE-2018-15704 has a CVSS v3 base score of 8.8 (HIGH severity).

Is CVE-2018-15704 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.