CVE-2023-2866

HIGH · CVSS 7.3 EPSS 0.14%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-06-07 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-2866

Severity

HIGH

CVSS

7.3

EPSS

0.14%

Original NVD Description

If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker full control of the SCADA server.