CVE-2019-3941

HIGH

Advantech WebAccess 8.3.4 - Unauthenticated Arbitrary File Deletion via IOCTL 10005 RPC

Title source: llm
STIX 2.1

Description

Advantech WebAccess 8.3.4 allows unauthenticated, remote attackers to delete arbitrary files via IOCTL 10005 RPC.

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://www.tenable.com/security/research/tra-2019-15
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/107847

Scores

CVSS v3 7.5
EPSS 0.0269
EPSS Percentile 86.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-306
Status published
Products (1)
advantech/webaccess 8.3.4
Published Apr 09, 2019
Tracked Since Feb 18, 2026