CVE-2023-22450

In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an ASP script file to a webserver when logged in as manager user, which can lead to arbitrary code execution.

• CWE-434

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-152-01Mitigation, Third Party Advisory, US Government Resource
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-152-01Mitigation, Third Party Advisory, US Government Resource

Published

Jun 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22443Integer overflow in some Intel(R) Server Board BMC firmware …5.5
• CVE-2023-22444Improper initialization in some Intel(R) NUC 13 Extreme Comp…4.4
• CVE-2023-22447Insertion of sensitive information into log file in the Open…4.4
• CVE-2023-22448Improper access control for some Intel Unison software may a…7.2
• CVE-2023-22449Improper input validation in some Intel(R) NUC BIOS firmware…6.7
• CVE-2023-2245A vulnerability was found in hansunCMS 1.4.3. It has been de…6.3
• CVE-2023-22451Kiwi TCMS is an open source test management system. In versi…8.8
• CVE-2023-22452kenny2automate is a Discord bot. In the web interface for se…6.5
• CVE-2023-22453Discourse is an option source discussion platform. Prior to …5.3
• CVE-2023-22454Discourse is an option source discussion platform. Prior to …6.1
• CVE-2023-22455Discourse is an option source discussion platform. Prior to …6.1
• CVE-2023-22456ViewVC, a browser interface for CVS and Subversion version c…6.1