A local file inclusion vulnerability exists in the installation functionality of Advantech WebAccess/SCADA 9.0.1. A specially crafted application can lead to information disclosure. An attacker can send an authenticated HTTP request to trigger this vulnerability.
| Software | From | Fixed in |
|---|---|---|
| advantech / webaccess/scada | 9.0.1 | 9.0.1.x |