CVE-2020-12022

—

CVSS 3.1

9.8 critical

EPSS

2%p75

Published

May 8, 2020 (May 8, 2020)

Modified

Jun 17, 2026

Description

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An improper validation vulnerability exists that could allow an attacker to inject specially crafted input into memory where it can be executed.

Vendors: advantech
Products: webaccess
Weakness: CWE-129
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.