CVE-2019-3942 | BDVDB-2026-133274 Detail

Advantech WebAccess

Description#

Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can use this vulnerability to recover the administrator password.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-284 Improper Access Control

References#

https://www.tenable.com/security/research/tra-2019-15

Exploit#

No public exploit known

History#

Version 12020-04-01Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.