Critical severity9.8NVD Advisory· Published May 8, 2020· Updated Jun 17, 2026

CVE-2020-10638

Description

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple heap-based buffer overflow vulnerabilities exist caused by a lack of proper validation of the length of user-supplied data, which may allow remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Advantech/Webaccess3 versions
cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*range: <=8.4.4
- cpe:2.3:a:advantech:webaccess:9.0.0:*:*:*:*:*:*:*
- (no CPE)range: <= 9.0.0
Advantech/WebAccess Nodedescription

Patches

Vulnerability mechanics

References

www.us-cert.gov/ics/advisories/icsa-20-128-01nvdThird Party AdvisoryUS Government Resource
www.zerodayinitiative.com/advisories/ZDI-20-593/nvdThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-20-599/nvdThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-20-600/nvdThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-20-603/nvdThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-20-616/nvdThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-20-621/nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000