CVE-2016-9349
HighSummary
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior, allowing an attacker to traverse the file system and extract files, potentially leading to information disclosure.
Risk Assessment
Information disclosure could lead to serious security breaches within the organization, including data loss or privacy violations.
Recommendation
It is recommended to upgrade to the latest version of Advantech SUISAccess Server to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Advantech SUISAccess Server
See all- CVE-2016-9353High
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior related to the storage of the admin password. The password is encrypted with a static key hard-coded in the program, allowing attackers to reverse it.
- CVE-2016-9351High
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior related to directory traversal/file upload error that allows an attacker to upload and unpack a zip file.
Original NVD description (English source)
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. An attacker could traverse the file system and extract files that can result in information disclosure.