| Package | Affected versions | Patched versions |
|---|---|---|
| webaccess | ≤ 8.2_20170817≤ 8.3.0 | |
| webaccess/nms | ≤ 2.0.3 | |
| webaccess dashboard | ≤ 2.0.15 | |
| webaccess scada | < 8.3.1 | 8.3.1 |
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a TFTP application has unrestricted file uploads to the web application without authorization, which may allow an attacker to execute arbitrary code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free