Skip to contentAdvantech vulnerabilities
Products
Show 2 moreShow less
Newest
- advantech webaccess scadaAdvantech WebAccess SCADACVE-2021-384314.3 Medium
- advantech webaccessA stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused...CVE-2021-38408EPSS 11.6%9.8 Critical
- advantech webaccess/scada, webaccess\/scada +1 moreThe affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker...CVE-2021-329439.8 Critical
- advantech webaccess/scada, webaccess\/scada +1 moreUserExcelOut.asp within WebAccess/SCADA is vulnerable to cross-site scripting (XSS), which could...CVE-2021-226766.1 Medium
- advantech webaccess/scada, webaccess\/scada +1 moreThe affected product is vulnerable to a relative path traversal condition, which may allow an...CVE-2021-226746.5 Medium
- advantech r-seenetAn OS Command Injection vulnerability exists in the ping.php script functionality of Advantech R...CVE-2021-21805EPSS 69.6%9.8 Critical
- advantech r-seenetThis vulnerability is present in device_graph_page.php script, which is a part of the Advantech R...CVE-2021-218039.6 Critical
- advantech r-seenetThis vulnerability is present in device_graph_page.php script, which is a part of the Advantech R...CVE-2021-218029.6 Critical
- advantech r-seenetThis vulnerability is present in device_graph_page.php script, which is a part of the Advantech R...CVE-2021-21801EPSS 59.0%9.6 Critical
- advantech r-seenetA local file inclusion (LFI) vulnerability exists in the options.php script functionality of...CVE-2021-218048.1 High
- advantech r-seenetCross-site scripting vulnerabilities exist in the ssh_form.php script functionality of Advantech...CVE-2021-21800EPSS 14.1%9.6 Critical
- advantech r-seenetCross-site scripting vulnerabilities exist in the telnet_form.php script functionality of...CVE-2021-21799EPSS 12.3%9.6 Critical
- advantech webaccess hmi designer, webaccess\/hmi designer +1 moreOpening a maliciously crafted project file may cause an out-of-bounds write, which may allow an...CVE-2021-330027.8 High
- advantech webaccess hmi designer, webaccess\/hmi designer +1 moreThe affected product is vulnerable to memory corruption condition due to lack of proper...CVE-2021-330047.8 High
- advantech webaccess hmi designer, webaccess\/hmi designer +1 moreParsing a maliciously crafted project file may cause a heap-based buffer overflow, which may...CVE-2021-330007.8 High
- advantech webaccess\/scadaAdvantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to a directory traversal, which...CVE-2021-329546.5 Medium
- advantech webaccess\/scadaAdvantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to redirection, which may allow...CVE-2021-329566.1 Medium
- advantech iviewThe affected product’s configuration is vulnerable due to missing authentication, which may allow...CVE-2021-329309.8 Critical
- advantech iviewThe affected product is vulnerable to a SQL injection, which may allow an unauthorized attacker...CVE-2021-329327.5 High
- advantech webaccessAdvantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of...CVE-2021-345406.1 Medium
- advantech wise-paas/rmm, wise-paas\/rmm +1 moreThe affected product allows attackers to obtain sensitive information from the WISE-PaaS...CVE-2021-274379.1 Critical
- advantech webaccess\/scadaIncorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA...CVE-2021-226698.8 High
- advantech webaccess\/scadaWebAccess/SCADA Versions 9.0 and prior is vulnerable to cross-site scripting, which may allow an...CVE-2021-274366.1 Medium
- advantech spectre rt ert351 firmwareAdvantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication...CVE-2019-182359.8 Critical
- advantech spectre rt ert351 firmwareAdvantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in...CVE-2019-182317.5 High
- advantech spectre rt ert351 firmwareIn Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not...CVE-2019-182336.1 Medium
- advantech webaccess\/scadaAn exploitable local privilege elevation vulnerability exists in the file system permissions of...CVE-2020-135548.8 High
- advantech bb-eswgp506-2sfp-t firmwareBB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded...CVE-2021-226679.8 Critical
- advantech webaccess\/scadaThe WADashboard component of WebAccess/SCADA Versions 9.0 and prior may allow an attacker to...CVE-2020-251618.8 High
- advantech webaccess\/scadaAn exploitable local privilege elevation vulnerability exists in the file system permissions of...CVE-2020-135558.8 High
- advantech webaccess\/scadaAn exploitable local privilege elevation vulnerability exists in the file system permissions of...CVE-2020-135538.8 High
- advantech webaccess\/scadaAn exploitable local privilege elevation vulnerability exists in the file system permissions of...CVE-2020-135518.8 High
- advantech webaccess\/scadaAn exploitable local privilege elevation vulnerability exists in the file system permissions of...CVE-2020-135528.8 High
- advantech webaccess\/scadaA local file inclusion vulnerability exists in the installation functionality of Advantech...CVE-2020-135507.7 High
- advantech iviewAccess to the Advantech iView versions prior to v5.7.03.6112 configuration are missing...CVE-2021-22652Public exploitEPSS 36.8%9.8 Critical
- advantech iviewAdvantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may...CVE-2021-226567.5 High
- advantech iviewAdvantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow...CVE-2021-22658EPSS 12.7%9.8 Critical
- advantech iviewAdvantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow...CVE-2021-22654EPSS 12.2%7.5 High
- advantech r-seenetThe R-SeeNet webpage (1.5.1 through 2.4.10) suffers from SQL injection, which allows a remote...CVE-2020-251577.5 High
- advantech webaccess, webaccess node +1 moreWebAccess Node (All versions prior to 9.0.1) has incorrect permissions set for resources used by...CVE-2020-162027.8 High
- advantech iviewAdvantech iView, Versions 5.7 and prior. The affected product is vulnerable to path traversal...CVE-2020-162459.8 Critical
- ics-cert advantech webaccess hmi designer, advantech webaccess\/hmi designer +1 moreAdvantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted...CVE-2020-162297.8 High
- ics-cert advantech webaccess hmi designer, advantech webaccess\/hmi designer +1 moreAdvantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Multiple heap-based buffer...CVE-2020-162077.8 High
- ics-cert advantech webaccess hmi designer, advantech webaccess\/hmi designer +1 moreAdvantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. An out-of-bounds read...CVE-2020-162115.5 Medium
- ics-cert advantech webaccess hmi designer, advantech webaccess\/hmi designer +1 moreAdvantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted...CVE-2020-162137.8 High
- ics-cert advantech webaccess hmi designer, advantech webaccess\/hmi designer +1 moreAdvantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted...CVE-2020-162157.8 High
- ics-cert advantech webaccess hmi designer, advantech webaccess\/hmi designer +1 moreAdvantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused...CVE-2020-162177.8 High
- advantech iviewAdvantech iView, versions 5.6 and prior, has an improper authentication for critical function ...CVE-2020-145019.8 Critical
- advantech iviewAdvantech iView, versions 5.6 and prior, has an improper input validation vulnerability....CVE-2020-145039.8 Critical
- advantech iviewAdvantech iView, versions 5.6 and prior, has an improper access control vulnerability. Successful...CVE-2020-144997.5 High
- Show moreLoading…