CVE-2019-3942: Advantech Webaccess

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can use this vulnerability to recover the administrator password.

Affected products

• Advantech Webaccess: version 8.3.4 only

Published 2020-04-01. Last modified 2026-06-17.