{"id":"CVE-2020-12022","state":"PUBLISHED","title":"Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An improper validation vulnerability exists that could allow an attacker to inject specially crafted input into me","description":"Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An improper validation vulnerability exists that could allow an attacker to inject specially crafted input into memory where it can be executed.","publishedAt":"2020-05-08T11:38:54.000Z","updatedAt":"2024-08-04T11:48:57.655Z","severity":null,"assigner":"icscert","products":["n/a Advantech WebAccess Node"],"affected":[{"vendor":"n/a","product":"Advantech WebAccess Node","versions":[{"version":"WebAccess Node Version 8.4.4 and prior, WebAccess Node Version 9.0.0","status":"affected"}]}],"references":["https://www.us-cert.gov/ics/advisories/icsa-20-128-01","https://www.zerodayinitiative.com/advisories/ZDI-20-598/"],"weaknesses":["CWE-129"],"ingestedAt":"2026-10-29T19:46:27.697Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/12xxx/CVE-2020-12022.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-12022","state":"PUBLISHED","datePublished":"2020-05-08T11:38:54.000Z","dateUpdated":"2024-08-04T11:48:57.655Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2020-04-21T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An improper validation vulnerability exists that could allow an attacker to inject specially crafted input into memory where it can be executed."}],"affected":[{"vendor":"n/a","product":"Advantech WebAccess Node","versions":[{"version":"WebAccess Node Version 8.4.4 and prior, WebAccess Node Version 9.0.0","status":"affected"}]}],"references":[{"url":"https://www.us-cert.gov/ics/advisories/icsa-20-128-01","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-598/","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-129","description":"IMPROPER VALIDATION OF ARRAY INDEX CWE-129","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","dateUpdated":"2020-05-08T20:06:04.000Z","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"ics-cert@hq.dhs.gov","ID":"CVE-2020-12022","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Advantech WebAccess Node","version":{"version_data":[{"version_value":"WebAccess Node Version 8.4.4 and prior, WebAccess Node Version 9.0.0"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An improper validation vulnerability exists that could allow an attacker to inject specially crafted input into memory where it can be executed."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"IMPROPER VALIDATION OF ARRAY INDEX CWE-129"}]}]},"references":{"reference_data":[{"name":"https://www.us-cert.gov/ics/advisories/icsa-20-128-01","refsource":"MISC","url":"https://www.us-cert.gov/ics/advisories/icsa-20-128-01"},{"name":"https://www.zerodayinitiative.com/advisories/ZDI-20-598/","refsource":"MISC","url":"https://www.zerodayinitiative.com/advisories/ZDI-20-598/"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.us-cert.gov/ics/advisories/icsa-20-128-01","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-598/","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T11:48:57.655Z"}}]}}}