PT-2019-16795 · Advantech · Advantech Webaccess

Publicado 2019-04-09 · Atualizado 2020-08-24 · CVE-2019-3941

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Advantech WebAccess version 8.3.4

Description The issue allows unauthenticated, remote attackers to delete arbitrary files. This is achieved via IOCTL 10005 RPC.

Recommendations For Advantech WebAccess version 8.3.4, consider restricting access to the IOCTL 10005 RPC to prevent unauthenticated file deletion until a patch is available.

Exploit

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2019-3941

Produtos afetados

Advantech Webaccess

Referências · 4

• 🔥 https://tenable.com/security/research/tra-2019-15 · Exploit
• https://osv.dev/vulnerability/CVE-2019-3941 · Aviso do Fabricante
• http://securityfocus.com/bid/107847 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-3941 · Nota de Segurança