medium6.5Public exploit code
CVE-2018-15705
WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a director…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Advantech WebAccess SCADA 8.3.2 - Remote Code Execution2018-11-05 · webapps · asp
Impact
WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a directory traversal vulnerability in the writeFile API. An attacker can use this vulnerability to remotely execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advantech | Webaccess | Versions 8.3.1, 8.3.2 |