CVE-2016-0854

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.1

Description The issue is related to an unrestricted file upload vulnerability. This vulnerability can be exploited by a remote attacker to modify files of any type. The vulnerability is associated with the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer.

Recommendations For versions prior to 8.1, update to version 8.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the uploadImageCommon function in the UploadAjaxAction script until a patch is available. Restrict access to the UploadAjaxAction script to minimize the risk of exploitation.