EDB-45774

PoC

Advantech WebAccess SCADA 8.3.2 - Remote Code Execution

view exploit source exploit_dbtype webappsauthor Chris Lynepublished 2018-11-05catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-15707US	medium5.4	1.88% (79th)	Exploit	2018-10-31
Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page. An attacker could leverage this vulnerability to disclose credentials amongst…
CVE-2018-15705US	medium6.5	12.2% (96th)	Exploit	2018-10-31
WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a directory traversal vulnerabi…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.