CVE-2016-0854

PoC —

CVSS 3.0

9.8 critical

EPSS

77%p100

Published

Jan 15, 2016 (Jan 15, 2016)

Modified

Jun 17, 2026

Description

Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors.

Vendors: advantech
Products: webaccess
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (77.0%)

In the news0 stories

No ingested article mentions this CVE yet.