RULE(RULE ID:312723)

Rule General Information
Release Date: 2016-03-31
Rule Name: PROTOCOL-SCADA Advantech Webaccess Dashboard Removefile Directory Traversal Vulnerability -4 (CVE-2016-0855)
Severity:
CVE ID:
Rule Protection Details
Description: Directory traversal vulnerability in Advantech WebAccess before 8.1 allows remote attackers to list arbitrary virtual-directory files via unspecified vectors.
Impact: An attacker can abtain sensitive information of the target victim, and do malicious actions to gain profits using the information.
Affected OS: Windows
Reference: ZeroDayInitiative:ZDI-16-122
ZeroDayInitiative:ZDI-16-123
ZeroDayInitiative:ZDI-16-124
Solutions
More advisories have been published on the website, please visit for more suggestions:
http://advcloudfiles.advantech.com/web/Download/webaccess/Version%208.1.htm