Unscored CVE-2020-10603 EUVD-2020-3051GHSA-5mwx-jr2x-3wj7

WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely.

Published Apr 9, 2020 · Updated Aug 4, 2024 · Assigned by icscert

Description

WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely.

Affected products

Vendor	Product	Affected	Fixed
—	WebAccess/NMS	Versions prior to 3.0.2	—

Advisories 1

ICSA-20-098-01 Advantech WebAccess/NMS CISA ICS & IT advisories · Apr 7, 2020

References

https://www.us-cert.gov/ics/advisories/icsa-20-098-01