CVE-2023-2866 Advantech WebAccess Insufficient Type Distinction

If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker full control of the SCADA server...

CVE-2023-2866 Advantech WebAccess Insufficient Type Distinction

If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker full control of the SCADA server...

CVE-2023-2866

Summary: CVE-2023-2866 affects Advantech WebAccess/SCADA 8.4.5. The issue is described as Insufficient Type Distinction (CWE-351). An attacker who can trick an authenticated user into loading a maliciously crafted .zip file could use a web shell to gain full control of the SCADA server. The CVSS ...