CVE-2018-14806

Advantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an attacker to execute arbitrary code.
Configurations

Configuration 1 (hide)

cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*

History

21 Nov 2024, 03:49

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/105728 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/105728 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1041939 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1041939 - Third Party Advisory, VDB Entry
References () https://ics-cert.us-cert.gov/advisories/ICSA-18-296-01%2C - () https://ics-cert.us-cert.gov/advisories/ICSA-18-296-01%2C -

07 Nov 2023, 02:53

Type Values Removed Values Added
References
  • {'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-18-296-01,', 'name': 'https://ics-cert.us-cert.gov/advisories/ICSA-18-296-01,', 'tags': ['Third Party Advisory', 'US Government Resource'], 'refsource': 'MISC'}
  • () https://ics-cert.us-cert.gov/advisories/ICSA-18-296-01%2C -

Information

Published : 2018-10-23 20:29

Updated : 2024-11-21 03:49


NVD link : CVE-2018-14806

Mitre link : CVE-2018-14806

CVE.ORG link : CVE-2018-14806


JSON object : View

Products Affected

advantech

  • webaccess
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')