CVE-2016-9351

7HIGH

Key Information:

Vendor
Advantech
Status
Advantech Susiaccess Server 3.0 And Prior
Vendor
CVE Published:
13 February 2017

Summary

An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The directory traversal/file upload error allows an attacker to upload and unpack a zip file.

Affected Version(s)

Advantech SUSIAccess Server 3.0 and prior Advantech SUSIAccess Server 3.0 and prior

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-336-04
x_refsource_MISC
http://www.securityfocus.com/bid/94629
vdb-entryx_refsource_BID
https://www.exploit-db.com/exploits/42402/
exploitx_refsource_EXPLOIT-DB

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.