Command injection

The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a single argument aka the command parameter...

CVE-2018-6911

The CVE-2018-6911 entry concerns Advantech WebAccess 8.3.0, where the VBWinExec function in Node\AspVBObj.dll can be triggered remotely to execute arbitrary OS commands via a single argument. This is a remote code execution flaw rooted in the VBWinExec interface and its handling of the command pa...