CVE-2018-8841

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an improper privilege management vulnerability may allow an authenticated user to modify files when read access should only be given to the user.
References
Link Resource
http://www.securityfocus.com/bid/104190 Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:a:advantech:webaccess_dashboard:*:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:a:advantech:webaccess_scada:*:*:*:*:*:*:*:*

Configuration 5 (hide)

cpe:2.3:a:advantech:webaccess\/nms:*:*:*:*:*:*:*:*

Information

Published : 2018-05-15 22:29

Updated : 2019-10-09 23:42


NVD link : CVE-2018-8841

Mitre link : CVE-2018-8841


JSON object : View

Products Affected

advantech

  • webaccess_scada
  • webaccess
  • webaccess_dashboard
  • webaccess\/nms
CWE
CWE-269

Improper Privilege Management