CVE-2018-6911

CRITICAL 9.8CVE-2018-6911 · Published 13/02/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
webaccess advantech	`= 8.3.0`	No fix yet

Description

The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a single argument (aka the command parameter).

References

exploit-db.com/exploits/44031 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free