NetSight
medium6.5

CVE-2018-15706

WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to read any file on the filesystem due to a directory traversal vu…

Impact

WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to read any file on the filesystem due to a directory traversal vulnerability in the readFile API.

Affected products

VendorProductAffected versions
AdvantechWebaccess
Versions 8.3.1, 8.3.2

Weakness classification

References