Vulnerability Description
An Absolute Path Traversal issue was discovered in Advantech WebAccess Version 8.1 and prior. The absolute path traversal vulnerability has been identified, which may allow an attacker to traverse the file system to access restricted files or directories.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Advantech | Webaccess | <= 8.1 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/98311Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-124-03MitigationThird Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/98311Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-124-03MitigationThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2017-7929?
CVE-2017-7929 is a vulnerability with a CVSS score of 7.1 (HIGH). An Absolute Path Traversal issue was discovered in Advantech WebAccess Version 8.1 and prior. The absolute path traversal vulnerability has been identified, which may allow an attacker to traverse the...
How severe is CVE-2017-7929?
CVE-2017-7929 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-7929?
Check the references section above for vendor advisories and patch information. Affected products include: Advantech Webaccess.