Unscored CVE-2018-14820 EUVD-2018-6704GHSA-r462-fg2q-22pg

Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, whic…

Published Oct 23, 2018 · Updated Sep 16, 2024 · Assigned by icscert

Vendor: Advantech Product: Advantech WebAccess

Description

Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, which may allow an arbitrary file deletion when processing.

Affected products

Vendor	Product	Affected	Fixed
Advantech	Advantech WebAccess	WebAccess Versions 8.3.1 and prior	—

Advisories 1

ICSA-18-296-01 Advantech WebAccess CISA ICS & IT advisories · Oct 23, 2018

References

1041939 vdb-entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-296-01%2C
105728 vdb-entry