CVE-2018-15705 | BDVDB-2026-109003 Detail

AdvantechAdvantech WebAccess

Description#

WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a directory traversal vulnerability in the writeFile API. An attacker can use this vulnerability to remotely execute arbitrary code.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/45774/
https://www.tenable.com/security/research/tra-2018-35

Exploit#

https://www.exploit-db.com/exploits/45774/

History#

Version 12018-10-31Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.