CVE-2017-12702

An Externally Controlled Format String issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. String format specifiers based on user provided input are not properly validated, which could allow an attacker to execute arbitrary code.

• http://www.securityfocus.com/bid/100526
  Third Party AdvisoryVDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02
  Third Party AdvisoryUS Government Resource
• http://www.securityfocus.com/bid/100526
  Third Party AdvisoryVDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02
  Third Party AdvisoryUS Government Resource