PT-2019-16795
CVE-2019-3941
·
تاريخ النشر
2019-04-09
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Advantech WebAccess version 8.3.4
Description
The issue allows unauthenticated, remote attackers to delete arbitrary files. This is achieved via IOCTL 10005 RPC.
Recommendations
For Advantech WebAccess version 8.3.4, consider restricting access to the IOCTL 10005 RPC to prevent unauthenticated file deletion until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾