CVE-2018-6911: OS Command Injection
Published Feb 13, 2018
·Updated
The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a single argument (aka the command parameter).
Affected Software
1 affected component
Advantech WebAccess=8.3.0
Event History
Feb 13, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-6911?
CVE-2018-6911 is classified as a critical vulnerability due to its ability to allow remote command execution.
2
How do I fix CVE-2018-6911?
To mitigate CVE-2018-6911, upgrade Advantech WebAccess to the latest version or apply any available security patches.
3
Who is affected by CVE-2018-6911?
CVE-2018-6911 affects users of Advantech WebAccess version 8.3.0.
4
What type of vulnerability is CVE-2018-6911?
CVE-2018-6911 is a remote command execution vulnerability.
5
Can CVE-2018-6911 be exploited remotely?
Yes, CVE-2018-6911 can be exploited remotely, allowing attackers to execute arbitrary OS commands.