CVE-2018-8841
High
Description
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an improper privilege management vulnerability may allow an authenticated user to modify files when read access should only be given to the user.
SeverityHigh
CVSS7.8
Exploit probability—
ProductAdvantech Webaccess
PublishedMay 15, 2018
First seenMay 15, 2018
Weakness typeCWE-269Improper privilege management
How to fix
Update
- advantech webaccess_scada8.3.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| advantech webaccess | v ≤ 8.2_20170817, v ≤ 8.3.0 | — |
| advantech webaccess_dashboard | v ≤ 2.0.15 | — |
| advantech webaccess_scada | v < 8.3.1 | 8.3.1 |
| advantech webaccess\/nms | v ≤ 2.0.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.