PT-2016-1121 · Advantech · Webaccess

Aleksey Osipov + 1 · Publicado 2016-01-15 · Atualizado 2016-12-03 · CVE-2016-0854

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.1

Description The issue is related to an unrestricted file upload vulnerability. This vulnerability can be exploited by a remote attacker to modify files of any type. The vulnerability is associated with the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer.

Recommendations For versions prior to 8.1, update to version 8.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the uploadImageCommon function in the UploadAjaxAction script until a patch is available. Restrict access to the UploadAjaxAction script to minimize the risk of exploitation.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

BDU:2016-00380

CVE-2016-0854

ZDI-16-127

ZDI-16-128

ZDI-16-129

Produtos afetados

Webaccess

Referências · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/advantech_webaccess_dashboard_file_upload.rb · Exploit
• 🔥 https://exploit-db.com/exploits/39735 · Exploit
• https://zerodayinitiative.com/advisories/ZDI-16-128 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-16-129 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2016-0854 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-16-128 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01 · Nota
• http://zerodayinitiative.com/advisories/ZDI-16-127 · Nota
• https://bdu.fstec.ru/vul/2016-00380 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-16-127 · Nota de Segurança
• http://rapid7.com/db/modules/exploit/windows/scada/advantech_webaccess_dashboard_file_upload · Nota
• http://zerodayinitiative.com/advisories/ZDI-16-129 · Nota
• https://osv.dev/vulnerability/CVE-2016-0854 · Aviso do Fabricante