antiweb vulnerabilities and fixes
Recent CVEs affecting antiweb, with upgrade or downgrade steps. 2 tracked.
antiweb has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2017-12-27. Highest priority: CVE-2017-17888 (score 60/100).
- CVE-2017-9097 CRITICAL 9.1 UPGRADE In Anti-Web through 3.8.7, as used on NetBiter FGW200 devices through 3.21.2, WS100 devices through 3.30.5, EC
- CVE-2017-17888 HIGH 8.8 UPGRADE cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --
FAQ
How do I fix antiweb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is antiweb being exploited right now?
None of the tracked antiweb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which antiweb CVE should I patch first?
CVE-2017-17888 currently ranks highest (60/100): cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --.