Intrusion Prevention

Advantech.WA.IOCTL.10001.BwPFile.Arbitrary.File.Deletion

Description

This indicates an attack attempt to exploit an Arbitrary File Deletion Vulnerability in Advantech WebAccess.
The vulnerability is due to insufficient validation on user supplied paths before using them in file operations within BwPFile.exe. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target system. Successful exploitation results in the deletion of arbitrary files from the target system, and may lead to denial of service conditions if important executables or libraries are deleted.