CVE-2016-9349

An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. An attacker could traverse the file system and extract files that can result in information disclosure.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
icscertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
VendorProductVersion
advantechsusiaccess
𝑥
≤ 3.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/94629
https://ics-cert.us-cert.gov/advisories/ICSA-16-336-04
https://www.exploit-db.com/exploits/42401/
https://www.exploit-db.com/exploits/42402/
http://www.securityfocus.com/bid/94629
https://ics-cert.us-cert.gov/advisories/ICSA-16-336-04
https://www.exploit-db.com/exploits/42401/
https://www.exploit-db.com/exploits/42402/