CVE-2020-12026

HIGH

Advantech WebAccess < 8.4.4 and 9.0.0 - Path Traversal and Arbitrary File Write

Title source: llm

Description

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow a low privilege user to overwrite files outside the application’s control.

References (2)

Core 2

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://www.us-cert.gov/ics/advisories/icsa-20-128-01

Third Party Advisory, VDB Entry x_refsource_misc

https://www.zerodayinitiative.com/advisories/ZDI-20-626/

Scores

CVSS v3 8.8

EPSS 0.0189

EPSS Percentile 83.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-22 CWE-23

Status published

Products (2)

advantech/webaccess 9.0.0

advantech/webaccess < 8.4.4

Published May 08, 2020

Tracked Since Feb 18, 2026