ZDI-19-950: Advantech WISE-PaaS/RMM UpgradeMgmt upload_ota Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WISE-PasS/RMM. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the UpgradeMgmt class. When parsing the frmUpdateSettingUploadFileFullName parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-19-950?
The severity of ZDI-19-950 is rated high due to the potential for remote code execution.
How do I fix ZDI-19-950?
To fix ZDI-19-950, ensure that the affected version of Advantech WISE-PaaS/RMM is updated to the latest patched version.
What type of vulnerability is ZDI-19-950?
ZDI-19-950 is a remote code execution vulnerability that allows attackers to execute arbitrary code.
Who is affected by ZDI-19-950?
Organizations using affected installations of Advantech WISE-PaaS/RMM are susceptible to ZDI-19-950.
Can the authentication mechanism in ZDI-19-950 be bypassed?
Yes, the authentication mechanism in ZDI-19-950 can be bypassed, making it easier for attackers to exploit the vulnerability.