CVEvulnerability

CVE-2019-13550

9.8 CRITICAL Published 2019-09-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-09-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:C
Weaknesses
CWE-285

Description

In WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an attacker to disclose sensitive information, cause improper control of generation of code, which may allow remote code execution or cause a system crash.

Affected configurations

• advantech webaccess (<= 8.4.1)

Related

Weakness · CWE (1)

  • CWE-285 Improper Authorization weakness

References