← CVE Intelligence

CVE-2023-2866

Advantech WebAccess Insufficient Type Distinction PUBLISHED

Description (CNA)

If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker full control of the SCADA server.

Affected (CNA)

Vendor / productVersions
Advantech / WebAccess/SCADAaffected 8.4.5

CWE

CWE-351

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.