Description
If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker full control of the SCADA server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Advantech | WebAccess/SCADA | 8.4.5 | — |
Advisories 1
- ICSA-23-150-01 Advantech WebAccess/SCADA CISA ICS & IT advisories · May 25, 2023