Advantech SUSIAccess 3.0 File Upload

! /usr/bin/env ruby =begin Exploit Title: Advantech SUSIAccess RecoveryMgmt File Upload Date: 07/31/17 Exploit Author: james fitts Vendor Homepage: http://www.advantech.com/ Version: Advantech SUSIAccess = 3.0 Tested on: Windows 7 SP1 Relavant Advisories: ZDI-16-630 ZDI-16-628 CVE-2016-9349...

CVE-2016-9351

An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The directory traversal/file upload error allows an attacker to upload and unpack a zip file...

CVE-2016-9351

CVE-2016-9351 affects Advantech SUISAccess Server (3.0 and earlier). A directory traversal/file upload flaw allows uploading and unpacking a zip file, enabling potential arbitrary file write. Public PoCs and advisories (RecoveryMgmt/upload) demonstrate a traversal path to place files on the serve...

CVE-2016-9351

An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The directory traversal/file upload error allows an attacker to upload and unpack a zip file...