Unscored CVE-2020-10619 EUVD-2020-3067GHSA-wpmh-wc89-xwhj

An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2) control.

Published Apr 9, 2020 · Updated Aug 4, 2024 · Assigned by icscert

Description

An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2) control.

Affected products

Vendor	Product	Affected	Fixed
—	WebAccess/NMS	Versions prior to 3.0.2	—

Advisories 1

ICSA-20-098-01 Advantech WebAccess/NMS CISA ICS & IT advisories · Apr 7, 2020

References

https://www.us-cert.gov/ics/advisories/icsa-20-098-01