Description
uaddUpAdmin.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to modify an administrative password via a password-change request.
Advisories 1
- ICSA-12-047-01A Advantech WebAccess Vulnerabilities CISA ICS & IT advisories · Jun 17, 2025