CVE-2019-3940CWE-434

CVE-2019-3940: vulnerability in Advantech WebAccess

Published · Updated

Follow this CVE+ Monitor WebAccess

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 4.1%
Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call. An unauthenticated, remote attacker can use this vulnerability to execute arbitrary code.
Affected products
Advantech · WebAccess
Related CVEs — Advantech WebAccess

In the same product, most dangerous first.

CVE-2014-2364—Advantech WebAccess Stack-Based Buffer OverflowEPSS 61.4%CVE-2014-0763—Advantech WebAccess SQL InjectionEPSS 15.6%CVE-2021-38389CRITICALAdvantech WebAccessEPSS 10.4%CVE-2018-8845—CVE-2018-8845EPSS 5.6%CVE-2018-10589—CVE-2018-10589EPSS 3.9%CVE-2018-7499—CVE-2018-7499EPSS 3.7%