CVE-2014-2365

Published: Jul 19, 2014Modified: May 6, 2026

5.5

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Exploitability: 8.0 / Impact: 4.9

Source: NVD

Description

Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors.

Affected (4)

Products: Advantech: Advantech Webaccess

Advantech

1 product

Advantech Webaccess

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Advantech Advantech Webaccess	Up to 7.1
Advantech Advantech Webaccess	Version 5.0
Advantech Advantech Webaccess	Version 6.0
Advantech Advantech Webaccess	Version 7.0

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (3)

http://webaccess.advantech.com/

Source: ics-cert@hq.dhs.gov

https://www.cisa.gov/news-events/ics-advisories/icsa-14-198-02

Source: ics-cert@hq.dhs.gov

http://ics-cert.us-cert.gov/advisories/ICSA-14-198-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.