PT-2019-16794
CVE-2019-3940
·
تاريخ النشر
2019-04-09
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Advantech WebAccess version 8.3.4
Description
The issue allows an unauthenticated, remote attacker to execute arbitrary code via file upload attacks using an unauthenticated RPC call.
Recommendations
For Advantech WebAccess version 8.3.4, consider restricting access to the RPC call to prevent unauthenticated file uploads until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾