CVE-2018-14820: advantech advantech_webaccess External Control of File Name or Path

EPSS trend

Probability

2.20%

Chance of exploitation in the next 30 days

Percentile

82%

Versus all other CVEs

30-day change

-0.28 pp

From 2.48% on 21-09-2026

21-09-202621-10-2026

EPSS score

2.20%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

3 links

www.securitytracker.com/id/1041939VDB EntryX Refsource SECTRACKThird Party Advisory
ics-cert.us-cert.gov/advisories/ICSA-18-296-01%2CX Refsource MISC
www.securityfocus.com/bid/105728VDB EntryX Refsource BIDThird Party Advisory

Related vulnerabilities

CVE-2018-14828advantechadvantech_webaccess+10.41%8y ago23-10-2018 20:00Advantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which may allow an attacker to access those files and perform actions at a system administrator level.CVE-2018-14816advantechadvantech_webaccess+14.13%8y ago23-10-2018 20:00Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities that have been identified, which may allow an attacker to execute arbitrary code.CVE-2018-14806advantechadvantech_webaccess+14.78%8y ago23-10-2018 20:00Advantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an attacker to execute arbitrary code.CVE-2018-17908advantechwebaccess0.45%7y ago29-10-2018 18:00WebAccess Versions 8.3.2 and prior. During installation, the application installer disables user access control and does not re-enable it after the installation is complete. This could allow an attacker to run elevated arbitrary code.CVE-2018-17910advantechwebaccess5.22%7y ago29-10-2018 18:00WebAccess Versions 8.3.2 and prior. The application fails to properly validate the length of user-supplied data, causing a buffer overflow condition that allows for arbitrary remote code execution.CVE-2018-7499advantechwebaccess+33.74%8y ago15-05-2018 22:00In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, several stack-based buffer overflow vulnerabilities have been identified, which may allow an attacker to execute arbitrary code.

All vulnerabilities inadvantech_webaccess webaccess

CVE-2018-14820: advantech advantech_webaccess External Control of File Name or Path

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References