PT-2018-6313 · Advantech · Advantech Webaccess

Chris Lyne + 1 · Published 2018-01-05 · Updated 2019-10-09 · CVE-2017-16720

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess versions 8.3.2 and earlier

Description: A Path Traversal issue was discovered, allowing an attacker to access files within the directory structure of the target device.

Recommendations: For Advantech WebAccess versions 8.3.2 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2017-16720

ZDI-18-024

ZDI-18-056

Affected Products

Advantech Webaccess

References · 8

• 🔥 https://exploit-db.com/exploits/44278 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-16720 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-18-024 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-18-056 · Security Note
• https://osv.dev/vulnerability/CVE-2017-16720 · Vendor Advisory
• https://tenable.com/security/research/tra-2018-23 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02 · Note
• http://securityfocus.com/bid/102424 · Note