Unscored CVE-2019-3942 EUVD-2019-13549GHSA-6q62-ccgm-chgc

Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can u…

Published Apr 1, 2020 · Updated Aug 4, 2024 · Assigned by tenable

Description

Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can use this vulnerability to recover the administrator password.

Affected products

Vendor	Product	Affected	Fixed
—	Advantech WebAccess	8.3.4	—

References

https://www.tenable.com/security/research/tra-2019-15