CVE-2017-16720

Опубликовано: 05 янв. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Средний

Описание

A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within the directory structure of the target device.

Ссылки

http://www.securityfocus.com/bid/102424
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02
Broken Link
Third Party Advisory
US Government Resource
https://www.exploit-db.com/exploits/44278/
Exploit
Third Party Advisory
VDB Entry
https://www.tenable.com/security/research/tra-2018-23
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-18-024/
Third Party Advisory
http://www.securityfocus.com/bid/102424
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02
Broken Link
Third Party Advisory
US Government Resource
https://www.exploit-db.com/exploits/44278/
Exploit
Third Party Advisory
VDB Entry
https://www.tenable.com/security/research/tra-2018-23
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*

Версия до 8.3.2 (включая)

EPSS

Процентиль: 96%

0.27209

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-fh38-p8hv-hjcv