CVE-2019-13551: Advantech WISE-PaaS/RMM UpgradeMgmt Directory Traversal Remote Code Execution Vulnerability
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper validation of a user-supplied path prior to use in file operations. An attacker can leverage these vulnerabilities to remotely execute code while posing as an administrator.
Other sources
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WISE-PasS/RMM. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RMSWatchDog service, which listens on TCP port 81 by default. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM.
— ZDI
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WISE-PaaS/RMM. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DeviceMapMgmt class. When parsing the LastMapName, the process does not properly validate a user-supplied path prior to using it in file operations.An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
— ZDI
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WISE-PasS/RMM. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the UpgradeMgmt class. When parsing the frmUpdateSettingUploadFileFullName parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
— ZDI
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WISE-PasS/RMM. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UpgradeMgmt class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-13551?
CVE-2019-13551 has been classified as a high-severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2019-13551?
To fix CVE-2019-13551, upgrade to a version of Advantech WISE-PaaS/RMM that is higher than 3.3.29.
What causes the CVE-2019-13551 vulnerability?
CVE-2019-13551 is caused by improper validation of user-supplied paths before they are used in file operations.
Which versions of Advantech WISE-PaaS/RMM are affected by CVE-2019-13551?
Advantech WISE-PaaS/RMM versions 3.3.29 and prior are affected by CVE-2019-13551.
Can CVE-2019-13551 be exploited remotely?
Yes, CVE-2019-13551 can be exploited remotely by an attacker posing as an administrator.