A vulnerability (CVE-2017-16720) in Advantech WebAccess allows attackers to remotely executed commands with administrator privileges on vulnerable systems.
Source : Advantech WebAccess RCE flaw still exploitable, exploit code available – Help Net Security