← CVE Intelligence

CVE-2018-15705

Advantech / Advantech WebAccess PUBLISHED

Description (CNA)

WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a directory traversal vulnerability in the writeFile API. An attacker can use this vulnerability to remotely execute arbitrary code.

Affected (CNA)

Vendor / productVersions
Advantech / Advantech WebAccessaffected 8.3.1 and 8.3.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.