CVE-2023-32628: Malicious File Upload
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify the file extension of a certificate file to ASP when uploading it, which can lead to remote code execution.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-32628?
CVE-2023-32628 is an arbitrary file upload vulnerability in Advantech WebAccss/SCADA v9.1.3 and prior, which could allow remote code execution.
How severe is CVE-2023-32628?
CVE-2023-32628 has a severity rating of 9.8 (Critical).
What software versions are affected by CVE-2023-32628?
Advantech WebAccss/SCADA versions up to and including 9.1.3 are affected by CVE-2023-32628.
What is the potential impact of CVE-2023-32628?
CVE-2023-32628 could allow an attacker to modify the file extension of a certificate file to ASP when uploading, leading to remote code execution.
Is there a fix or patch available for CVE-2023-32628?
At the time of writing, no specific fix or patch has been mentioned for CVE-2023-32628. It is recommended to follow the guidance provided by the vendor or security advisories.