CVE-2016-9351
HighSummary
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior related to directory traversal/file upload error that allows an attacker to upload and unpack a zip file.
Risk Assessment
An attacker could exploit this vulnerability to upload malicious software, potentially compromising the system.
Recommendation
It is recommended to upgrade to the latest version of Advantech SUISAccess Server to mitigate this vulnerability.
Other vulnerabilities in Advantech SUISAccess Server
See all- CVE-2016-9353High
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior related to the storage of the admin password. The password is encrypted with a static key hard-coded in the program, allowing attackers to reverse it.
- CVE-2016-9349High
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior, allowing an attacker to traverse the file system and extract files, potentially leading to information disclosure.
Original NVD description (English source)
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The directory traversal/file upload error allows an attacker to upload and unpack a zip file.