CVE-2020-25161

2021-02-2316:14:20

CWE-73

icscert

www.cve.org

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.1%

JSON

The WADashboard component of WebAccess/SCADA Versions 9.0 and prior may allow an attacker to control or influence a path used in an operation on the filesystem and remotely execute code as an administrator.

CNA Affected

[
  {
    "product": "Advantech WebAccess/SCADA",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 9.0 and prior"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-20-289-01