critical9.8
CVE-2020-12006
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0.
Impact
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow a low privilege user to overwrite files outside the application’s control.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advantech | Webaccess | through 8.4.4 Version 9.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.us-cert.gov/ics/advisories/icsa-20-128-01
- https://www.zerodayinitiative.com/advisories/ZDI-20-589/
- https://www.zerodayinitiative.com/advisories/ZDI-20-595/
- https://www.zerodayinitiative.com/advisories/ZDI-20-605/
- https://www.us-cert.gov/ics/advisories/icsa-20-128-01
- https://www.zerodayinitiative.com/advisories/ZDI-20-589/
- https://www.zerodayinitiative.com/advisories/ZDI-20-595/
- https://www.zerodayinitiative.com/advisories/ZDI-20-605/