Advantech WebAccess/SCADA
All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to using untrusted pointers. The RPC arguments sent by the client can contain raw memory pointers that will be used as is by the server. This can lead to an attacker gaining access to the remote file system and the ability to execute commands and overwrite files.