Critical severity9.8NVD Advisory· Published Jan 15, 2016· Updated Jun 17, 2026

CVE-2016-0854

Description

Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Advantech/Webaccess2 versions
cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*range: <=8.0
- (no CPE)range: <8.1

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/39735/nvdExploit
ics-cert.us-cert.gov/advisories/ICSA-16-014-01nvdThird Party AdvisoryUS Government Resource
www.rapid7.com/db/modules/exploit/windows/scada/advantech_webaccess_dashboard_file_uploadnvd
www.zerodayinitiative.com/advisories/ZDI-16-127nvd
www.zerodayinitiative.com/advisories/ZDI-16-128nvd
www.zerodayinitiative.com/advisories/ZDI-16-129nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.062
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000