CVE-2018-8845
Description
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a heap-based buffer overflow vulnerability has been identified, which may allow an attacker to execute arbitrary code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
A heap-based buffer overflow in Advantech WebAccess could allow an attacker to execute arbitrary code.
Vulnerability
A heap-based buffer overflow vulnerability exists in Advantech WebAccess versions V8.2_20170817 and prior, V8.3.0 and prior, Dashboard V.2.0.15 and prior, Scada Node prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior. The issue is triggered when processing specially crafted requests, leading to memory corruption [1].
Exploitation
An attacker can exploit this vulnerability remotely without authentication, requiring low skill level. By sending a crafted request to the affected WebAccess component, the heap-based buffer overflow is triggered, potentially allowing arbitrary code execution [1].
Impact
Successful exploitation allows an attacker to execute arbitrary code on the host or target system, potentially leading to full system compromise, data disclosure, or file deletion [1].
Mitigation
Not yet disclosed in the available references. Users should restrict network access to the affected systems and contact Advantech for updated versions [1].
AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
4- Range: <= V2.0.15
- Range: < 8.3.1
<= V8.3.0+ 1 more
- (no CPE)range: <= V8.3.0
- (no CPE)range: WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, WebAccess/NMS 2.0.3 and prior.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securityfocus.com/bid/104190mitrevdb-entryx_refsource_BID
- ics-cert.us-cert.gov/advisories/ICSA-18-135-01mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.