CVE-2016-9351

Name of the Vulnerable Software and Affected Versions Advantech SUISAccess Server versions 3.0 and prior

Description An issue was discovered that allows an attacker to perform a directory traversal and file upload, enabling them to upload and unpack a zip file. This can potentially lead to remote code execution.

Recommendations For Advantech SUISAccess Server versions 3.0 and prior, consider restricting access to the upload functionality as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.