Description
In WebAccess versions 8.4.1 and prior, multiple command injection vulnerabilities are caused by a lack of proper validation of user-supplied data and may allow arbitrary file deletion and remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WebAccess | versions 8.4.1 and prior | — |
Advisories 1
- ICSA-19-260-01 Advantech WebAccess CISA ICS & IT advisories · Sep 17, 2019