Not rated
CVE-2021-22669 Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA…
Description
Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA Versions 9.0.1 and prior, which may allow a low-privileged user to update an administrator’s password and login as an administrator to escalate privileges on the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Advantech WebAccess/SCADA | Versions not published |
References
- us-cert.cisa.gov us-cert.cisa.gov
Timeline
- Published
- Last modified
Other CVEs of Advantech WebAccess/SCADA
The 10 CVEs of Advantech WebAccess/SCADA →
CVE-2021-32954
Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to a directory traversal, which may allow an attacker…
Not rated
CVE-2021-32956
Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to redirection, which may allow an attacker to send a…
Not rated
CVE-2021-27436
WebAccess/SCADA Versions 9.0 and prior is vulnerable to cross-site scripting, which may allow an attacker to send…
Not rated
CVE-2020-25161
The WADashboard component of WebAccess/SCADA Versions 9.0 and prior may allow an attacker to control or influence a path…
Not rated