CVE-2020-12006

CRITICAL

Advantech WebAccess < 8.4.4 - Authenticated Path Traversal and Arbitrary File Write

Title source: llm
STIX 2.1

Description

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow a low privilege user to overwrite files outside the application’s control.

References (4)

Core 4
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://www.us-cert.gov/ics/advisories/icsa-20-128-01
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-20-589/
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-20-605/
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-20-595/

Scores

CVSS v3 9.8
EPSS 0.0415
EPSS Percentile 88.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-22 CWE-23
Status published
Products (2)
advantech/webaccess 9.0.0
advantech/webaccess < 8.4.4
Published May 08, 2020
Tracked Since Feb 18, 2026