CVE-2020-13550: Path Traversal
A local file inclusion vulnerability exists in the installation functionality of Advantech WebAccess/SCADA 9.0.1. A specially crafted application can lead to information disclosure. An attacker can send an authenticated HTTP request to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-13550?
CVE-2020-13550 is classified as a local file inclusion vulnerability that can lead to information disclosure.
How do I fix CVE-2020-13550?
To fix CVE-2020-13550, update to the latest version of Advantech WebAccess/SCADA that addresses this vulnerability.
What versions of Advantech WebAccess/SCADA are affected by CVE-2020-13550?
CVE-2020-13550 specifically affects Advantech WebAccess/SCADA version 9.0.1.
Can CVE-2020-13550 be exploited remotely?
CVE-2020-13550 requires an authenticated HTTP request to trigger the vulnerability, which means it cannot be exploited remotely by unauthenticated users.
What are the potential impacts of CVE-2020-13550?
The potential impact of CVE-2020-13550 includes unauthorized information disclosure due to local file inclusion.