VULNERABILITY INTELLIGENCE

CVE-2020-12022

CVSS score9.8 CRITICAL

EPSS probability1.67%

CISA KEVNot currently listed

Published2020-05-08

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An improper validation vulnerability exists that could allow an attacker to inject specially crafted input into memory where it can be executed.

Weakness classification

CWE-129: Improper Validation of Array Index

Primary references

ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
ics-cert@hq.dhs.gov — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory