CVE-2018-6911

The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a single argument (aka the command parameter).

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-02-13

Last modified

2024-08-05

Weaknesses

CWE-78

Affected products

• Webaccess (Advantech)

References

• https://www.exploit-db.com/exploits/44031/