PT-2020-12249 · Advantech · Webaccess/Nms

Published 2020-04-08 · Updated 2020-04-10 · CVE-2020-10621

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/NMS versions prior to 3.0.2

Description The issue allows files to be uploaded and executed on the WebAccess/NMS, potentially leading to remote code execution. This is due to multiple unrestricted file upload vulnerabilities in various actions and resources, including extProgramAction, ProfileResource, DBBackupRestoreAction, LicenseImportAction, DBBackupResource, saveBackground, ConfigRestoreAction, SupportDeviceaddAction, and FwUpgradeAction.

Recommendations For versions prior to 3.0.2, update to version 3.0.2 or later to resolve the issue. As a temporary workaround, consider disabling the vulnerable actions and resources until a patch is available. Restrict access to the WebAccess/NMS to minimize the risk of exploitation. Avoid using the affected actions and resources in the WebAccess/NMS until the issue is resolved.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-10621

ZDI-20-373

ZDI-20-383

ZDI-20-385

ZDI-20-386

ZDI-20-387

ZDI-20-389

ZDI-20-397

ZDI-20-400

ZDI-20-402

ZDI-20-405

ZDI-20-406

Affected Products

Webaccess/Nms

References · 15

• https://zerodayinitiative.com/advisories/ZDI-20-386 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-387 · Security Note
• https://osv.dev/vulnerability/CVE-2020-10621 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-20-383 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-10621 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-406 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-400 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-373 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-397 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-389 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-385 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-402 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-405 · Security Note
• https://t.me/cvenotify/2611 · Telegram Post
• https://us-cert.gov/ics/advisories/icsa-20-098-01 · Note