Description
WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a directory traversal vulnerability in the writeFile API. An attacker can use this vulnerability to remotely execute arbitrary code.
Exploits (1)
Scores
CVSS v3
6.5
EPSS
0.0665
EPSS Percentile
91.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Details
CWE
CWE-22
Status
published
Products (2)
advantech/webaccess
8.3.1
advantech/webaccess
8.3.2
Published
Oct 31, 2018
Tracked Since
Feb 18, 2026