Unscored CVE-2018-15706 EUVD-2018-7576GHSA-8g8q-89jc-69gc

WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to read any file on the filesystem due to a di…

Published Oct 31, 2018 · Updated Sep 17, 2024 · Assigned by tenable

Vendor: Advantech Product: Advantech WebAccess

Description

WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to read any file on the filesystem due to a directory traversal vulnerability in the readFile API.

Affected products

Vendor	Product	Affected	Fixed
Advantech	Advantech WebAccess	8.3.1 and 8.3.2	—

References

https://www.tenable.com/security/research/tra-2018-35