PT-2017-18004

CVE-2017-7929

·

Published

2017-05-04

·

Updated

2019-10-09

Description by

CVSS 3.1
7.1
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 8.1 and prior
Description An Absolute Path Traversal issue may allow an attacker to traverse the file system to access restricted files or directories.
Recommendations For Advantech WebAccess versions 8.1 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-36: Absolute Path Traversal
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2017-7929
ZDI-17-322
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com