Unscored CVE-2020-10631 EUVD-2020-3079GHSA-672q-2qcf-wwfp

An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's (versions prior to 3.0.2) control.

Published Apr 9, 2020 · Updated Aug 4, 2024 · Assigned by icscert

Description

An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's (versions prior to 3.0.2) control.

Affected products

Vendor	Product	Affected	Fixed
—	WebAccess/NMS	Versions prior to 3.0.2	—

Advisories 1

ICSA-20-098-01 Advantech WebAccess/NMS CISA ICS & IT advisories · Apr 7, 2020

References

https://www.us-cert.gov/ics/advisories/icsa-20-098-01