Not rated
CVE-2019-3942 Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files
Description
Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can use this vulnerability to recover the administrator password.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Advantech WebAccess | 8.3.4 | No fix stated |
References
- www.tenable.com www.tenable.com
Timeline
- Published
- Last modified
Other CVEs of Advantech WebAccess
The 22 CVEs of Advantech WebAccess →
CVE-2021-38408
A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper…
Not rated
CVE-2020-10607
In Advantech WebAccess, Versions 8.4.2 and prior
Not rated
CVE-2017-16736
An Unrestricted Upload Of File With Dangerous Type issue was discovered in Advantech WebAccess versions prior to 8.3
Not rated
CVE-2017-16732
A use-after-free issue was discovered in Advantech WebAccess versions prior to 8.3
Not rated