Description
The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Advantech | WebAccess | ≤ 7.1 | 7.2 |
Advisories 1
- ICSA-14-198-02 Advantech WebAccess Vulnerabilities CISA ICS & IT advisories · Jun 6, 2025