CVE-2016-0854

Critical · 9.8

CVSS

9.8

EPSS

77.0%

Published

Jan 15, 2016

CISA due date

—

The record

Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors.

Affected packages

Ecosystem	Package	Introduced	Fixed