Description
An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Advantech | WebAccess SCADA | All – ≤ 9.0.3 | — |
Advisories 1
- ICSA-21-285-01 Advantech WebAccess SCADA CISA ICS & IT advisories · Oct 12, 2021