CVE-2018-5445

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. An attacker has read access to files within the directory structure of the target device.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	Advantech WebAccess/SCADA	Advantech WebAccess/SCADA

References

http://www.securityfocus.com/bid/102781Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-023-01Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/102781Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-023-01Third Party Advisory, US Government Resource

Timeline

Published: Jan 25, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-54464.9Medtronic 2090 CareLink Programmer uses a per-product username and password that is stored in a recoverable format.CVE-2018-54479.8An Improper Input Validation issue was discovered in Nari PCS-9611 relay. An improper input validation vulnerability has been identified tha CVE-2018-54484.8Medtronic 2090 CareLink Programmer’s software deployment network contains a directory traversal vulnerability that could allow an attacker t CVE-2018-54496.5A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application does CVE-2018-54519.8In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not prove or insufficien CVE-2018-54527.5A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Controller: ControlWav CVE-2018-54537.5An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and CVE-2018-54548.1Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability where code debugging methods are enabled, which could allo CVE-2018-54559.8A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 1606 CVE-2018-54577.0A uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade Utility used with Windows XP systems, Versions CVE-2018-54587.5Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability using SSL legacy encryption that could allow an attacker t CVE-2018-54599.8An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute d