Approved changes feed: RSS · Atom

cpe:2.3:a:advantech:webaccess:8.3.4:*:*:*:*:*:*:*

part: a version: 8.3.4 update: *

VendorAdvantech (fedf766b-bee1-5692-bcc7-1aa8d9dc594c)
ProductWebaccess (ebd8b910-9fe2-5d81-afde-a07cacb71fb1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3942 vulnerable 2026-06-03 14:40:27.915849 Details available
Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can use this vulnerability to recover the administrator password.
Published: 2020-04-01T16:04:29.000Z
Updated: 2024-08-04T19:26:27.802Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3941 vulnerable 2026-06-03 14:40:27.914581 Details available
Advantech WebAccess 8.3.4 allows unauthenticated, remote attackers to delete arbitrary files via IOCTL 10005 RPC.
Published: 2019-04-09T15:06:37.000Z
Updated: 2024-08-04T19:26:27.534Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3940 vulnerable 2026-06-03 14:40:27.914182 Details available
Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call. An unauthenticated, remote attacker can use this vulnerability to execute arbitrary code.
Published: 2019-04-09T15:05:01.000Z
Updated: 2024-08-04T19:26:27.481Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.