RULE(RULE ID:331183)

Rule General Information
Release Date: 2020-09-17
Rule Name: Advantech WebAccess NMS ProfileResource importFile Arbitrary File Upload Vulnerability (CVE-2020-10621)
Severity:
CVE ID:
Rule Protection Details
Description: Multiple issues exist that allow files to be uploaded and executed on the WebAccess/NMS (versions prior to 3.0.2).
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows
Reference: https://www.us-cert.gov/ics/advisories/icsa-20-098-01
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://www.advantech.com/