QwikSec

Security Database

CVE

CWE

Training

CVE-2019-13551

Published: Oct 31, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper validation of a user-supplied path prior to use in file operations. An attacker can leverage these vulnerabilities to remotely execute code while posing as an administrator.

Vendor	Product	Versions
n/a	Advantech WISE-PaaS/RMM	affected `Versions 3.3.29 and prior`

Weaknesses (CWE)

References

https://www.us-cert.gov/ics/advisories/icsa-19-304-01

x_refsource_MISC

https://www.zerodayinitiative.com/advisories/ZDI-19-935/

x_refsource_MISC

https://www.zerodayinitiative.com/advisories/ZDI-19-950/

x_refsource_MISC

https://www.zerodayinitiative.com/advisories/ZDI-19-941/

x_refsource_MISC

https://www.zerodayinitiative.com/advisories/ZDI-19-958/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.