{"uuid": "3fc15470-3478-4097-bd6f-0510d6c286c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-5810", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/advantech_webaccess_creds.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"h00die\", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module allows you to log into Advantech WebAccess 8.1, and collect all of the credentials.\\n          Although authentication is required, any level of user permission can exploit this vulnerability.\\n\\n          Note that 8.2 is not suitable for this.\", \"disclosure_date\": \"2017-01-21\", \"fullname\": \"auxiliary/gather/advantech_webaccess_creds\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Advantech WebAccess 8.1 Post Authentication Credential Collector\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/gather/advantech_webaccess_creds.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"gather/advantech_webaccess_creds\", \"references\": [\"CVE-2016-5810\", \"URL-https://github.com/rapid7/metasploit-framework/pull/7859#issuecomment-274305229\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:11.249517Z"}