CVE-2019-3942: High severity advantech webop vulnerability

Published Apr 1, 2020

Updated

Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can use this vulnerability to recover the administrator password.

Affected Software

1 affected component

Advantech WebAccess=8.3.4

Event History

Apr 1, 2020

CVE Published

via MITRE·04:04 PM

Data Sourced

via MITRE·04:04 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-3942?

CVE-2019-3942 is a vulnerability in Advantech WebAccess 8.3.4 that allows unauthenticated remote users to read files.

What is the severity of CVE-2019-3942?

The severity of CVE-2019-3942 is high, with a CVSS score of 7.5.

How does CVE-2019-3942 affect Advantech WebAccess 8.3.4?

CVE-2019-3942 allows unauthenticated remote users to read files in Advantech WebAccess 8.3.4.

How can an attacker exploit CVE-2019-3942?

An attacker can exploit CVE-2019-3942 by using the vulnerability to recover the administrator password.

Where can I find more information about CVE-2019-3942?

You can find more information about CVE-2019-3942 at the following link: [https://www.tenable.com/security/research/tra-2019-15](https://www.tenable.com/security/research/tra-2019-15)