VULNERABILITY INTELLIGENCE

CVE-2019-3942

CVSS score7.5 HIGH
EPSS probability1.40%
CISA KEVNot currently listed
Published2020-04-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can use this vulnerability to recover the administrator password.

Weakness classification

  • vulnreport@tenable.com: CWE-284
  • nvd@nist.gov: CWE-522

Primary references