CVE-2018-8841

EUVD-2018-20449
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an improper privilege management vulnerability may allow an authenticated user to modify files when read access should only be given to the user.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 27%
Affected Products (NVD)
VendorProductVersion
advantechwebaccess
𝑥
≤ 8.2_20170817
advantechwebaccess
𝑥
≤ 8.3.0
advantechwebaccess_dashboard
𝑥
≤ 2.0.15
advantechwebaccess_scada
𝑥
< 8.3.1
advantechwebaccess\/nms
𝑥
≤ 2.0.3
𝑥
= Vulnerable software versions