Advantech WebAccess 8.3.1/8.3.2 WADashboard API path traversal

Summaryinfo

A vulnerability has been found in Advantech WebAccess 8.3.1/8.3.2 and classified as critical. Affected is an unknown function of the component WADashboard API. This manipulation causes path traversal. This vulnerability is tracked as CVE-2018-15706. The attack is possible to be carried out remotely. No exploit exists.

Detailsinfo

A vulnerability was found in Advantech WebAccess 8.3.1/8.3.2 (SCADA Software). It has been declared as critical. Affected by this vulnerability is an unknown part of the component WADashboard API. The manipulation with an unknown input leads to a path traversal vulnerability. The CWE definition for the vulnerability is CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. As an impact it is known to affect confidentiality. The summary by CVE is:

WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to read any file on the filesystem due to a directory traversal vulnerability in the readFile API.

The bug was discovered 10/31/2018. The weakness was disclosed 10/30/2018 (Website). It is possible to read the advisory at tenable.com. This vulnerability is known as CVE-2018-15706 since 08/22/2018. The attack can be launched remotely. A single authentication is necessary for exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1006 according to MITRE ATT&CK.

The commercial vulnerability scanner Qualys is able to test this issue with plugin 13344 (Advantech WebAccess Multiple Security Vulnerabilities).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entries VDB-126366 and VDB-126368 are pretty similar. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• SCADA Software

Vendor

• Advantech

Name

• WebAccess

Version

• 8.3.1
• 8.3.2

License

• commercial

Website

• Vendor: https://www.advantech.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion