Security Advisory

CVE-2023-2866

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-06-07 20:12:46
Last updated 2025-01-16 21:32:10
Assigner icscert
State PUBLISHED

Description

If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker full control of the SCADA server.