CVE-2017-12708

An Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities that allow invalid locations to be referenced for the memory buffer, which may allow an attacker to execute arbitrary code or cause the system to crash.

• CWE-119
• CWE-119

• http://www.securityfocus.com/bid/100526Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/100526Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02Third Party Advisory, US Government Resource

Published

Aug 30, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12702An Externally Controlled Format String issue was discovered …
• CVE-2017-12703A Cross-Site Request Forgery (CSRF) issue was discovered in …
• CVE-2017-12704A heap-based buffer overflow issue was discovered in Advante…
• CVE-2017-12705A Heap-Based Buffer Overflow issue was discovered in Advante…
• CVE-2017-12706A stack-based buffer overflow issue was discovered in Advant…
• CVE-2017-12707A Stack-based Buffer Overflow issue was discovered in Spider…
• CVE-2017-12709A Use of Hard-Coded Credentials issue was discovered in MRD-…
• CVE-2017-1271IBM Security Guardium 9.0, 9.1, and 9.5 supports interaction…
• CVE-2017-12710A SQL Injection issue was discovered in Advantech WebAccess …
• CVE-2017-12711An Incorrect Privilege Assignment issue was discovered in Ad…
• CVE-2017-12712The authentication algorithm in Abbott Laboratories pacemake…
• CVE-2017-12713An Incorrect Permission Assignment for Critical Resource iss…