CVE-2019-3940 | BDVDB-2026-115039 Detail

AdvantechWebAccess

Description#

Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call. An unauthenticated, remote attacker can use this vulnerability to execute arbitrary code.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-434 Unrestricted Upload of File with Dangerous Type

References#

https://www.tenable.com/security/research/tra-2019-15
http://www.securityfocus.com/bid/107847

Exploit#

No public exploit known

History#

Version 12019-04-09Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.