CVE-2018-17908

—

CVSS 3.0

7.8 high

EPSS

<1%p38

Published

Oct 29, 2018 (Oct 29, 2018)

Modified

Jun 17, 2026

Description

WebAccess Versions 8.3.2 and prior. During installation, the application installer disables user access control and does not re-enable it after the installation is complete. This could allow an attacker to run elevated arbitrary code.

Vendors: advantech
Products: webaccess
Weakness: CWE-284
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.