CVE-2017-16720
critical · 9.8A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within the directory structure of the target device.
9.8
CVSS
50.3%
EPSS (exploit prob.)
99th
EPSS percentile
2018-01-05
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-22
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| advantech | webaccess | <= 8.3.2 |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/bid/102424
- https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02
- https://www.exploit-db.com/exploits/44278/
- https://www.tenable.com/security/research/tra-2018-23
- https://www.zerodayinitiative.com/advisories/ZDI-18-024/
- http://www.securityfocus.com/bid/102424
- https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02
- https://www.exploit-db.com/exploits/44278/
- https://www.tenable.com/security/research/tra-2018-23
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2017-16720