upAdminPg.asp in Advantech WebAccess prior to 8.1_20160519 allows remote authenticated administrators to obtain sensitive password information via unspecified vectors.
advantech webaccess