{"id":"CVE-2017-16728","aliases":["EUVD-2017-7912","GHSA-m9r2-4rm8-4w6g"],"status":"published","title":"An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8...","description":"An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the program to use an invalid memory address, resulting in a program crash.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02079,"percentile":0.81616,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-476","CWE-822"],"published":"2018-01-05T08:00:00Z","modified":"2026-06-17T01:09:43Z","products":[{"vendor":"advantech","product":"advantech webaccess"},{"vendor":"advantech","product":"webaccess"}],"references":[{"url":"http://www.securityfocus.com/bid/102424","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02","tags":["x_refsource_MISC","x_transferred","Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16728"},{"url":"https://github.com/advisories/GHSA-m9r2-4rm8-4w6g"}],"sources":{"cve":[{"id":"CVE-2017-16728","description":"An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the program to use an invalid memory address, resulting in a program crash.","status":"published","published":"2018-01-05T08:00:00Z","modified":"2024-08-05T20:35:20.278Z","cwes":["CWE-822"],"updated_at":"2026-11-02T14:33:21.142987Z"}],"euvd":[{"id":"EUVD-2017-7912","description":"An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the program to use an invalid memory address, resulting in a program crash.","status":"published","published":"2018-01-05T08:00:00Z","modified":"2024-08-05T20:35:20Z","updated_at":"2026-11-03T02:23:11.533108Z"}],"ghsa":[{"id":"GHSA-m9r2-4rm8-4w6g","title":"An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8...","description":"An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the program to use an invalid memory address, resulting in a program crash.","status":"published","published":"2022-05-13T01:37:21Z","modified":"2023-02-01T05:08:44Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:50:51.059157Z"}],"nvd":[{"id":"CVE-2017-16728","description":"An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the program to use an invalid memory address, resulting in a program crash.","status":"published","published":"2018-01-05T08:29:00.393Z","modified":"2026-06-17T01:09:43.557Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-822","CWE-476"],"updated_at":"2026-11-02T14:04:12.690425Z"}]}}