CVE-2018-8841

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an improper privilege management vulnerability may allow an authenticated user to modify files when read access should only be given to the user.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
icscertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 28%
VendorProductVersion
advantechwebaccess
𝑥
≤ 8.2_20170817
advantechwebaccess
𝑥
≤ 8.3.0
advantechwebaccess_dashboard
𝑥
≤ 2.0.15
advantechwebaccess_scada
𝑥
< 8.3.1
advantechwebaccess\/nms
𝑥
≤ 2.0.3
𝑥
= Vulnerable software versions