CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-3940

Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call. An unauthenticated, remote attacker can use this vulnerability to execute arbitrary cod

Status: Published
Published: 2019-04-09
Updated: 2024-08-04
Assigning organization: tenable

Description

Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call. An unauthenticated, remote attacker can use this vulnerability to execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Advantech WebAccess

8.3.4affected

References

https://www.tenable.com/security/research/tra-2019-15 ↗
http://www.securityfocus.com/bid/107847 ↗