Skip to content
OpenAdvisories
High ICSA-23-150-01 1 CVE

Advantech WebAccess/SCADA

Published May 25, 2023 · Updated May 25, 2023

Vendor: Advantech Product: WebAccess/SCADA

Summary

Successful exploitation of this vulnerability could allow an attacker full control over the SCADA (supervisory control and data acquisition) server.

Vulnerabilities 1

  • High 7.3
    CVE-2023-2866

    Advantech WebAccess Insufficient Type Distinction

    If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker full control of the SCADA server.

    Advantech WebAccess/SCADA

Revision history

  1. #1

    Initial Publication

References