Description (CNA)
Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can use this vulnerability to recover the administrator password.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Advantech WebAccess | affected 8.3.4 |
CWE
CWE-284
References
ADP enrichment
No English description supplied.