#VU41469 Input validation error in Advantech WebAccess - CVE-2014-2365

 

#VU41469 Input validation error in Advantech WebAccess - CVE-2014-2365

Published: July 19, 2014 / Updated: August 10, 2020


Vulnerability identifier: #VU41469
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2014-2365
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Advantech WebAccess
Software vendor:
Advantech Co., Ltd

Description

The vulnerability allows a remote #AU# to manipulate or delete data.

Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors.


Remediation

Install update from vendor's website.

External links