CVE-2021-32954

2021-06-1813:53:01

CWE-23

icscert

www.cve.org

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.4%

JSON

Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to a directory traversal, which may allow an attacker to remotely read arbitrary files on the file system.

CNA Affected

[
  {
    "product": "Advantech WebAccess/SCADA",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "WebAccess/SCADA Versions 9.0.1 and prior"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-168-03