Unscored CVE-2020-10629 EUVD-2020-3077GHSA-f4q7-86mf-q9v2

WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive …

Published Apr 9, 2020 · Updated Aug 4, 2024 · Assigned by icscert

Description

WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive files.

Affected products

Vendor	Product	Affected	Fixed
—	WebAccess/NMS	Versions prior to 3.0.2	—

Advisories 1

ICSA-20-098-01 Advantech WebAccess/NMS CISA ICS & IT advisories · Apr 7, 2020

References

https://www.us-cert.gov/ics/advisories/icsa-20-098-01