Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2023-2866

Advantech WebAccess Insufficient Type Distinction

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker full control of the SCADA server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Advantech WebAccess/SCADA

Default version status: unaffected

  • 8.4.5affected

References