Path traversal

2018-05-1522:29:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.039 Low

EPSS

Percentile

92.1%

JSON

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a path transversal vulnerability has been identified, which may allow an attacker to disclose sensitive information on the target.

CPENameOperatorVersion
webaccesseq<= 8.2-20170817
webaccessle8.3.0
webaccess\\/nmsle2.0.3
webaccess_dashboardle2.0.15
webaccess_scadalt8.3.1

Name	Operator	Version
webaccess	eq	<= 8.2-20170817
webaccess	le	8.3.0
webaccess\\/nms	le	2.0.3
webaccess_dashboard	le	2.0.15
webaccess_scada	lt	8.3.1

References

www.securityfocus.com/bid/104190

ics-cert.us-cert.gov/advisories/ICSA-18-135-01