CVE-2017-16720
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2017-16720
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within the directory structure of the target device.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Advantech WebAccess 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Advantech WebAccess（前称BroadWin WebAccess）是研华（Advantech）公司的一套基于浏览器架构的HMI/SCADA软件。该软件支持动态图形显示和实时数据控制，并提供远程控制和管理自动化设备的功能。 Advantech WebAccess 8.3之前的版本中存在路径遍历漏洞。攻击者可该漏洞访问目标设备目录结构内的文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Advantech WebAccess | Advantech WebAccess | - |
II. Public POCs for CVE-2017-16720
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | WebAccess远程命令执行漏洞(CVE-2017-16720)复现 | https://github.com/CN016/WebAccess-CVE-2017-16720- | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-16720
Please Login to view more intelligence information
- https://www.tenable.com/security/research/tra-2018-23x_refsource_MISC
- https://ics-cert.us-cert.gov/advisories/ICSA-18-004-02x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2017-16720
Same Patch Batch · n/a · 2018-01-05 · 24 CVEs total
| CVE-2017-15549 | 多款EMC产品安全漏洞 | |
| CVE-2018-5253 | Bento4 安全漏洞 | |
| CVE-2018-5252 | ImageWorsener 安全漏洞 | |
| CVE-2018-5251 | libming 安全漏洞 | |
| CVE-2018-5249 | Shaarli 跨站脚本漏洞 | |
| CVE-2018-5248 | ImageMagick 缓冲区错误漏洞 | |
| CVE-2018-5247 | ImageMagick 安全漏洞 | |
| CVE-2018-5246 | ImageMagick 安全漏洞 | |
| CVE-2017-18022 | ImageMagick 安全漏洞 | |
| CVE-2017-18021 | QtPass 安全漏洞 | |
| CVE-2018-5244 | Xen 安全漏洞 | |
| CVE-2017-15550 | 多款EMC产品路径遍历漏洞 | |
| CVE-2017-16716 | Advantech WebAccess SQL注入漏洞 | |
| CVE-2017-15548 | 多款EMC产品安全漏洞 | |
| CVE-2017-16666 | Xplico 安全漏洞 | |
| CVE-2014-8579 | TRENDnet TEW-823DRU设备安全漏洞 | |
| CVE-2014-8540 | Gitlab‘groups’API 安全绕过漏洞 | |
| CVE-2014-8336 | WordPress WP-DBManager插件Sql Run Query面板安全漏洞 | |
| CVE-2014-8335 | WordPress WP-DBManager插件信任管理问题漏洞 | |
| CVE-2017-16905 | DuoLingo TinyCards application for Android 安全漏洞 |
Showing top 20 of 24 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-6667
PgBouncer missing authorization check in KILL_CLIENT admin c - CVE-2026-6666
PgBouncer crash in kill_pool_logins_server_error - CVE-2026-6665
PgBouncer buffer overflow in SCRAM - CVE-2026-6664
PgBouncer integer overflow in PgBouncer network packet parsi - CVE-2026-8127
eladmin Users API Endpoint UserController.java checkLevel ac
Same weakness: CWE-22
- CVE-2026-42351
pygeoapi: Path Traversal in STAC FileSystemProvider - CVE-2026-42213
SolidCAM-GPPL-IDE: Path traversal in `inc` directive enables - CVE-2026-7807
SmarterTools SmarterMail < Build 9560 Server Local File Incl - CVE-2026-42028
novaGallery: Unauthenticated Path Traversal in Album and Cac - CVE-2026-41887
Flarum: Path traversal in LESS parser via theme color settin
V. Comments for CVE-2017-16720
No comments yet