CVE-2018-8841

N/A

Description

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an improper privilege management vulnerability may allow an authenticated user to modify files when read access should only be given to the user.

CVE Details

CVSS v3.1 ScoreN/A

Published5/15/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

advantech:webaccessadvantech:webaccess\/nmsadvantech:webaccess_dashboardadvantech:webaccess_scada

Weaknesses (CWE)

CWE-269CWE-269

References

http://www.securityfocus.com/bid/104190(ics-cert@hq.dhs.gov)

https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01(ics-cert@hq.dhs.gov)

http://www.securityfocus.com/bid/104190(af854a3a-2127-422b-91ae-364da2661108)

https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.