CVE-2019-3940

Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call. An unauthenticated, remote attacker can use this vulnerability to execute arbitrary code.

• CWE-434
• CWE-434

• http://www.securityfocus.com/bid/107847Third Party Advisory, VDB Entry
• https://www.tenable.com/security/research/tra-2019-15Third Party Advisory
• http://www.securityfocus.com/bid/107847Third Party Advisory, VDB Entry
• https://www.tenable.com/security/research/tra-2019-15Third Party Advisory

Published

Apr 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3934Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…5.3
• CVE-2019-3935Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…9.1
• CVE-2019-3936Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…7.5
• CVE-2019-3937Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…7.8
• CVE-2019-3938Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…7.8
• CVE-2019-3939Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…9.8
• CVE-2019-3941Advantech WebAccess 8.3.4 allows unauthenticated, remote att…
• CVE-2019-3942Advantech WebAccess 8.3.4 does not properly restrict an RPC …7.5
• CVE-2019-3943MikroTik RouterOS versions Stable 6.43.12 and below, Long-te…8.1
• CVE-2019-3944Parrot ANAFI is vulnerable to Wi-Fi deauthentication attack,…7.5
• CVE-2019-3945Web server running on Parrot ANAFI can be crashed due to the…7.5
• CVE-2019-3946Fuji Electric V-Server before 6.0.33.0 is vulnerable to deni…