description: WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a directory traversal vulnerability in the writeFile API. An attacker can use this vulnerability to remotely execute arbitrary code.
problem types: Directory Traversal
affected:
{
product: Advantech WebAccess
vendor: Advantech
versions:
status: affected, version: 8.3.1 and 8.3.2
}