Описание
WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a directory traversal vulnerability in the writeFile API. An attacker can use this vulnerability to remotely execute arbitrary code.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party Advisory
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:advantech:webaccess:8.3.1:*:*:*:*:*:*:*
cpe:2.3:a:advantech:webaccess:8.3.2:*:*:*:*:*:*:*
EPSS
Процентиль: 91%
0.06646
Низкий
6.5 Medium
CVSS3
8.5 High
CVSS2
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 6.5
github
больше 3 лет назад
WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a directory traversal vulnerability in the writeFile API. An attacker can use this vulnerability to remotely execute arbitrary code.
EPSS
Процентиль: 91%
0.06646
Низкий
6.5 Medium
CVSS3
8.5 High
CVSS2
Дефекты
CWE-22