CVE-2016-0854 - CVE House
Back to Database
Status published Critical CVE-2016-0854

Unrestricted file upload vulnerability in the uploadImageCommon function in the...

Vulnerability Description

Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-0854

Credits & Attribution

No credits recorded in the NVD database.

References

More from advantech

View All →
CVE-2021-40397
A privilege escalation vulnerability exists in the installation of Advantech...
High 8.8
CVE-2021-40396
A privilege escalation vulnerability exists in the installation of Advantech...
High 8.8
CVE-2021-40389
A privilege escalation vulnerability exists in the installation of Advantech...
High 8.8
CVE-2021-40388
A privilege escalation vulnerability exists in Advantech SQ Manager Server...
High 8.8
CVE-2021-34540
Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username...
Medium 6.1

Affected Vendor

Affected Software

webaccess
Vulnerable Versions:
0

Timeline

Official Publish: January 15th, 2016
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.