CVE-2016-0854

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 77%

from disclosure to weapon102 days

Published on NVDJan 15

1st PoC+102d

metasploit+21d

exploitation probability

77%top 1% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors.

Affected products

n/a · n/a

public PoCs found — 2✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/39735 cve_referencewww.exploit-db.com/exploits/39735/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01 https://www.exploit-db.com/exploits/39735/http://www.rapid7.com/db/modules/exploit/windows/scada/advantech_webaccess_dashboard_file_upload http://www.zerodayinitiative.com/advisories/ZDI-16-127 http://www.zerodayinitiative.com/advisories/ZDI-16-128 http://www.zerodayinitiative.com/advisories/ZDI-16-129