CVE-2018-15705
MEDIUMAdvantech WebAccess 8.3.1-8.3.2 - Authenticated Path Traversal and Arbitrary File Write via WADashboard writeFile API
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2018-15705. PoCs published by Chris Lyne.
AI-analyzed exploit summary This exploit combines CVE-2018-15707 (XSS for credential theft) and CVE-2018-15705 (arbitrary file write) to achieve remote code execution on Advantech WebAccess SCADA 8.3.2. It requires user interaction to steal credentials via a malicious link, then writes an ASP file to execute arbitrary commands.
Description
WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a directory traversal vulnerability in the writeFile API. An attacker can use this vulnerability to remotely execute arbitrary code.
Exploits (1)
This exploit combines CVE-2018-15707 (XSS for credential theft) and CVE-2018-15705 (arbitrary file write) to achieve remote code execution on Advantech WebAccess SCADA 8.3.2. It requires user interaction to steal credentials via a malicious link, then writes an ASP file to execute arbitrary commands.
References (2)
Scores
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N