Multiple issues exist that allow files to be uploaded and executed on the WebAccess/NMS (versions before 3.0.2).
advantech webaccess\\/nms