Input validation error in Advantech WebAccess - CVE-2014-2365
Published: July 19, 2014 / Updated: August 10, 2020
Vulnerability identifier: #VU41469
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2014-2365
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote #AU# to manipulate or delete data.
Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors.
Affected software
Advantech WebAccess
How to mitigate CVE-2014-2365
Install update from vendor's website.