CVE-2019-3942

Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can use this vulnerability to recover the administrator password.

Score

CVSS 3.1 7.5 High

Status

Modified - vulnreport@tenable.com

Published

2020-04-01

Last modified

2024-08-04

Weaknesses

CWE-284, CWE-522

Affected products

• Webaccess (Advantech)

References

• https://www.tenable.com/security/research/tra-2019-15