CVE-2018-14820

State: Published
Severity: Not scored
Published: Oct 23, 2018
Updated: Sep 16, 2024
Reserved: Aug 1, 2018

Description

Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, which may allow an arbitrary file deletion when processing.

Scores

The record has no CVSS score.

Weaknesses

CWE-73 EXTERNAL CONTROL OF FILE NAME OR PATH CWE-73

Affected Products

Product	Versions
Advantech WebAccessAdvantech	WebAccess Versions 8.3.1 and priorAffected

References

1041939vdb-entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-296-01%2C
105728vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.