CVE-2016-0854

Critical

Published: 15/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2016-0854 describes an unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in Advantech WebAccess before version 8.1. This allows remote attackers to write to files of arbitrary types via unspecified vectors.

Risk Assessment

Attackers could exploit this vulnerability to upload malicious files, potentially leading to system compromise and data leakage.

Recommendation

It is recommended to upgrade to Advantech WebAccess version 8.1 or later to mitigate this vulnerability.

Original NVD description (English source)

Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors.