In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an malicious user to modify the file extension of a certificate file to ASP when uploading it, which can lead to remote code execution.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
advantech webaccess\\/scada |
Vulmon