CVE-2023-32628 (webaccess/scada)

In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify the file extension of a certificate file to ASP when uploading it, which can lead to remote code execution.

advantech asp certificate code code execution cve extension file file upload remote code remote code execution scada upload vulnerability