critical9.8Public exploit code
CVE-2016-0854
Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAcces…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Advantech Webaccess Dashboard Viewer - Arbitrary File Upload (Metasploit)2016-04-26 · remote · windows · Verified
Impact
Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advantech | Webaccess | through 8.0 |
References
- NVD record
- CVE.org record
- http://www.rapid7.com/db/modules/exploit/windows/scada/advantech_webaccess_dashboard_file_upload
- http://www.zerodayinitiative.com/advisories/ZDI-16-127
- http://www.zerodayinitiative.com/advisories/ZDI-16-128
- http://www.zerodayinitiative.com/advisories/ZDI-16-129
- https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01
- https://www.exploit-db.com/exploits/39735/
- http://www.rapid7.com/db/modules/exploit/windows/scada/advantech_webaccess_dashboard_file_upload
- http://www.zerodayinitiative.com/advisories/ZDI-16-127
- http://www.zerodayinitiative.com/advisories/ZDI-16-128
- http://www.zerodayinitiative.com/advisories/ZDI-16-129
- https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01
- https://www.exploit-db.com/exploits/39735/