All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent could contain raw memory pointers for the server to use as-is. This could allow an attacker to gain access to the remote file system and the ability to execute commands and overwrite files.

All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent client could contain raw memory pointers for the server to use as-is. This could allow an attacker to gain access to the remote file system and the ability to execute commands and overwrite files.

All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to using untrusted pointers. The RPC arguments sent by the client can contain raw memory pointers that will be used as is by the server. This can lead to an attacker gaining access to the remote file system and the ability to execute commands and overwrite files.