critical9.8Public exploit code
CVE-2017-16720
A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Advantech WebAccess < 8.3 - Directory Traversal / Remote Code Execution2018-03-12 · webapps · windows · Verified
Impact
A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within the directory structure of the target device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advantech | Webaccess | through 8.3.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/102424
- https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02
- https://www.exploit-db.com/exploits/44278/
- https://www.tenable.com/security/research/tra-2018-23
- https://www.zerodayinitiative.com/advisories/ZDI-18-024/
- http://www.securityfocus.com/bid/102424
- https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02
- https://www.exploit-db.com/exploits/44278/
- https://www.tenable.com/security/research/tra-2018-23