File Upload Vulnerability in Advantech WebAccess 8.3.4 Allows Remote Code Execution

File Upload Vulnerability in Advantech WebAccess 8.3.4 Allows Remote Code Execution

CVE-2019-3940 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call. An unauthenticated, remote attacker can use this vulnerability to execute arbitrary code.

Learn more about our Web App Pen Testing.