CVE-2016-5810

EPSS 15.4%

Vexday Risk Score

23Low

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 15.4%KEV nãoPoC —Nuclei —Metasploit simPatch —

Lifecycle

21 Jan 2017Metasploit module available

02 May 2017Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

upAdminPg.asp in Advantech WebAccess before 8.1_20160519 allows remote authenticated administrators to obtain sensitive password information via unspecified vectors.

Affected products

n/a · n/a

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01 http://www.zerodayinitiative.com/advisories/ZDI-16-429