CVE-2019-3940

—

CVSS 3.0

9.8 critical

EPSS

4%p90

Published

Apr 9, 2019 (Apr 9, 2019)

Modified

Jun 17, 2026

Description

Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call. An unauthenticated, remote attacker can use this vulnerability to execute arbitrary code.

Vendors: advantech
Products: webaccess
Weakness: CWE-434
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.1%)

In the news0 stories

No ingested article mentions this CVE yet.