CVE-2019-3942CWE-284

Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files

published April 1, 2020

CVSS
—
EPSS
1%
Percentile
72.3
In the wild
Unconfirmed
What it is

Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can use this vulnerability to recover the administrator password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01403 · 72.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2020-04-01T16:04Z
EPSS history
Timeline
  • 01 APR 16:04Z
    Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files
    cvelistv5