NVD

Id
17211  
Name
CVE-2016-0854  
Description
Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-01-14  
Modified Date
2016-12-02  
Seq
2016-0854  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
95662 17211 CVE-2016-0854 http://www.rapid7.com/db/modules/exploit/windows/scada/advantech_webaccess_dashboard_file_upload  View
95663 17211 CVE-2016-0854 http://www.zerodayinitiative.com/advisories/ZDI-16-127  View
95664 17211 CVE-2016-0854 http://www.zerodayinitiative.com/advisories/ZDI-16-128  View
95665 17211 CVE-2016-0854 http://www.zerodayinitiative.com/advisories/ZDI-16-129  View
95666 17211 CVE-2016-0854 https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01  View
95667 17211 CVE-2016-0854 39735  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
511 JVNDB-2016-001284 Advantech WebAccess における任意のタイプのファイルに書き込まれる脆弱性 Advantech WebAccess には、ファイルを無制限にアップロードされることにより、任意のタイプのファイルに書き込まれる脆弱性が存在します。 CVE-2016-0854 87058 CVE-2016-0854 17211 10 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001284.html 2016-01-14 2016-01-26 View