CVE-2017-12710

A SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. By submitting a specially crafted parameter, it is possible to inject arbitrary SQL statements that could allow an attacker to obtain sensitive information.

• CWE-89
• CWE-89

• http://www.securityfocus.com/bid/100526Third Party Advisory, VDB Entry
• http://www.zerodayinitiative.com/advisories/ZDI-17-712/
• https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02Third Party Advisory, US Government Resource
• https://www.tenable.com/security/research/tra-2017-29
• http://www.securityfocus.com/bid/100526Third Party Advisory, VDB Entry
• http://www.zerodayinitiative.com/advisories/ZDI-17-712/
• https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02Third Party Advisory, US Government Resource
• https://www.tenable.com/security/research/tra-2017-29

Published

Aug 30, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12705A Heap-Based Buffer Overflow issue was discovered in Advante…
• CVE-2017-12706A stack-based buffer overflow issue was discovered in Advant…
• CVE-2017-12707A Stack-based Buffer Overflow issue was discovered in Spider…
• CVE-2017-12708An Improper Restriction Of Operations Within The Bounds Of A…
• CVE-2017-12709A Use of Hard-Coded Credentials issue was discovered in MRD-…
• CVE-2017-1271IBM Security Guardium 9.0, 9.1, and 9.5 supports interaction…
• CVE-2017-12711An Incorrect Privilege Assignment issue was discovered in Ad…
• CVE-2017-12712The authentication algorithm in Abbott Laboratories pacemake…
• CVE-2017-12713An Incorrect Permission Assignment for Critical Resource iss…
• CVE-2017-12714Abbott Laboratories pacemakers manufactured prior to Aug 28,…
• CVE-2017-12716Abbott Laboratories Accent and Anthem pacemakers manufacture…
• CVE-2017-12717An Uncontrolled Search Path Element issue was discovered in …