Advantech WISE-PaaS/RMM upload2eMap Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WISE-PaaS/RMM. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DeviceMapMgmt class. When parsing the LastMapName, the process does not...