CVE-2017-16720

A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within the directory structure of the target device.

Affected

Advantech WebAccess

CVSS v3.0 NVD

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

50.32% chance of exploitation in the next 30 days, 99th percentile

Published

2018-01-05

Updated

2024-08-05

Proof-of-concept exploits (1)

• CN016/WebAccess-CVE-2017-16720-1★ · 2023-10-10

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/44278

Security advisories

• http://www.securityfocus.com/bid/102424
• https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02
• https://www.tenable.com/security/research/tra-2018-23
• https://www.zerodayinitiative.com/advisories/ZDI-18-024

References

• CVE Record
• NVD entry

Related

• CVE-2020-11444
• CVE-2021-37580
• CVE-2023-27363
• CVE-2023-27524
• CVE-2023-2928
• CVE-2023-29922