Skip to content
Advantech Webaccess vulnerabilities
-
advantech ecowatch saas-composer, iot edge linux docker, iot edge windows +5 more +7 more
SQL Injection Vulnerability
CVE-2026-6888
7.2 High
-
advantech webaccess/scada, webaccess\/scada +1 more
Advantech WebAccess/SCADA Path Traversal
CVE-2025-67653
5.3 Medium
-
advantech webaccess/scada, webaccess\/scada +1 more
Advantech WebAccess/SCADA SQL Injection
CVE-2025-46268
5.3 Medium
-
advantech webaccess/scada, webaccess\/scada +1 more
Advantech WebAccess/SCADA Absolute Path Traversal
CVE-2025-14848
5.3 Medium
-
advantech webaccess/scada, webaccess\/scada +1 more
Advantech WebAccess/SCADA Unrestricted Upload of File with Dangerous Type
CVE-2025-14849
8.7 High
-
advantech webaccess/scada, webaccess\/scada +1 more
Advantech WebAccess/SCADA Improper Limitation of a Pathname to a Restricted Directory
CVE-2025-14850
7.2 High
-
advantech webaccess/vpn, webaccess\/vpn +1 more
Advantech WebAccess/VPN < 1.1.5 SQL Injection via NetworksController.addNetworkAction()
CVE-2025-34247
5.1 Medium
-
advantech webaccess/vpn, webaccess\/vpn +1 more
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxPrevalidationController.ajaxAction()
CVE-2025-34246
5.3 Medium
-
advantech webaccess/vpn, webaccess\/vpn +1 more
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxStandaloneVpnClientsController.ajaxAction()
CVE-2025-34245
5.3 Medium
-
advantech webaccess/vpn, webaccess\/vpn +1 more
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxDeviceFwRulesAction()
CVE-2025-34244
5.3 Medium
-
advantech webaccess/vpn, webaccess\/vpn +1 more
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxNetworkFwRulesAction()
CVE-2025-34243
5.3 Medium
-
advantech webaccess/vpn, webaccess\/vpn +1 more
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxNetworkController.ajaxAction()
CVE-2025-34242
8.6 High
-
advantech webaccess/vpn, webaccess\/vpn +1 more
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxDeviceController.ajaxDeviceAction()
CVE-2025-34241
5.3 Medium
-
advantech webaccess/vpn, webaccess\/vpn +1 more
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AppManagementController.appUpgradeAction()
CVE-2025-34240
8.6 High
-
advantech webaccess/vpn, webaccess\/vpn +1 more
Advantech WebAccess/VPN < 1.1.5 Command Injection in AppManagementController.appUpgradeAction()
CVE-2025-34239
8.6 High
-
advantech webaccess/vpn, webaccess\/vpn +1 more
Advantech WebAccess/VPN < 1.1.5 Path Traversal via AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction()
CVE-2025-34238
6.9 Medium
-
advantech webaccess/vpn, webaccess\/vpn +1 more
Advantech WebAccess/VPN < 1.1.5 Stored XSS via StandaloneVpnClientsController.addStandaloneVpnClientAction()
CVE-2025-34237
6.3 Medium
-
advantech webaccess/vpn, webaccess\/vpn +1 more
Advantech WebAccess/VPN < 1.1.5 Stored XSS via NetworksController.addNetworkAction()
CVE-2025-34236
6.2 Medium
-
advantech webaccess/scada
Advantech WebAccess/SCADA SQL Injection
CVE-2024-2453
6.4 Medium
-
advantech webaccess
Advantech WebAccess Debug Messages Revealing Unnecessary Information
CVE-2023-4215
6.5 Medium
-
advantech webaccess/scada, webaccess\/scada +1 more
CVE-2023-1437
CVE-2023-1437
9.8 Critical
-
advantech webaccess, webaccess/scada +1 more
Advantech WebAccess Insufficient Type Distinction
CVE-2023-2866
7.3 High
-
advantech webaccess/scada, webaccess\/scada +1 more
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability...
CVE-2023-22450
7.2 High
-
advantech webaccess/scada, webaccess\/scada +1 more
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability...
CVE-2023-32540
7.2 High
-
advantech webaccess/scada, webaccess\/scada +1 more
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload...
CVE-2023-32628
7.2 High
-
advantech hmi designer, webaccess hmi designer +1 more
AzeoTech DAQFactory
CVE-2021-42703
5.4 Medium
-
advantech hmi designer, webaccess hmi designer +1 more
AzeoTech DAQFactory
CVE-2021-42706
7.8 High
-
advantech webaccess/nms, webaccess\/nms +1 more
Advantech WebAccess/NMS Improper Authentication
CVE-2021-32951
5.3 Medium
-
advantech webaccess
Advantech WebAccess
CVE-2021-38389
EPSS 10.4%
9.8 Critical
-
advantech webaccess
Advantech WebAccess
CVE-2021-33023
9.8 Critical
-
advantech webaccess scada
Advantech WebAccess SCADA
CVE-2021-38431
4.3 Medium
-
advantech webaccess
A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused...
CVE-2021-38408
EPSS 11.6%
9.8 Critical
-
advantech webaccess/scada, webaccess\/scada +1 more
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker...
CVE-2021-32943
9.8 Critical
-
advantech webaccess/scada, webaccess\/scada +1 more
UserExcelOut.asp within WebAccess/SCADA is vulnerable to cross-site scripting (XSS), which could...
CVE-2021-22676
6.1 Medium
-
advantech webaccess/scada, webaccess\/scada +1 more
The affected product is vulnerable to a relative path traversal condition, which may allow an...
CVE-2021-22674
6.5 Medium
-
advantech webaccess hmi designer, webaccess\/hmi designer +1 more
Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an...
CVE-2021-33002
7.8 High
-
advantech webaccess hmi designer, webaccess\/hmi designer +1 more
The affected product is vulnerable to memory corruption condition due to lack of proper...
CVE-2021-33004
7.8 High
-
advantech webaccess hmi designer, webaccess\/hmi designer +1 more
Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may...
CVE-2021-33000
7.8 High
-
advantech webaccess\/scada
Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to a directory traversal, which...
CVE-2021-32954
6.5 Medium
-
advantech webaccess\/scada
Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to redirection, which may allow...
CVE-2021-32956
6.1 Medium
-
advantech webaccess
Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of...
CVE-2021-34540
6.1 Medium
-
advantech webaccess\/scada
Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA...
CVE-2021-22669
8.8 High
-
advantech webaccess\/scada
WebAccess/SCADA Versions 9.0 and prior is vulnerable to cross-site scripting, which may allow an...
CVE-2021-27436
6.1 Medium
-
advantech webaccess\/scada
An exploitable local privilege elevation vulnerability exists in the file system permissions of...
CVE-2020-13554
8.8 High
-
advantech webaccess\/scada
The WADashboard component of WebAccess/SCADA Versions 9.0 and prior may allow an attacker to...
CVE-2020-25161
8.8 High
-
advantech webaccess\/scada
An exploitable local privilege elevation vulnerability exists in the file system permissions of...
CVE-2020-13555
8.8 High
-
advantech webaccess\/scada
An exploitable local privilege elevation vulnerability exists in the file system permissions of...
CVE-2020-13553
8.8 High
-
advantech webaccess\/scada
An exploitable local privilege elevation vulnerability exists in the file system permissions of...
CVE-2020-13551
8.8 High
-
advantech webaccess\/scada
An exploitable local privilege elevation vulnerability exists in the file system permissions of...
CVE-2020-13552
8.8 High
-
advantech webaccess\/scada
A local file inclusion vulnerability exists in the installation functionality of Advantech...
CVE-2020-13550
7.7 High
- Show olderLoading…