Description
Advantech WebAccess是研华（Advantech）公司的一套基于浏览器架构的HMI/SCADA软件。该软件支持动态图形显示和实时数据控制，并提供远程控制和管理自动化设备的功能。 Advantech WebAccess 8.1之前版本中存在任意文件上传漏洞。远程攻击者可利用该漏洞写入任意类型的文件。
Advantech WebAccess 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2023-32628
https://www.icsisia.com/industry/content-817.html
https://cve.imfht.com/detail/CVE-2016-0854
https://nvd.nist.gov/vuln/detail/CVE-2023-32628
https://www.exploit-db.com/exploits/39735
https://www.zerodayinitiative.com/advisories/zdi-20-397/
https://www.sonicwall.com/blog/advantech-webaccess-nms-arbitrary-file-upload-vulnerability-being-exploited
https://www.cnvd.org.cn/flaw/show/CNVD-2024-15543
https://www.nsfocus.net/vulndb/83089