Lucene search
+L

1863 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/18 12:00 a.m.•7 views

CVE-2021-32954: Relative Path Traversal

Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to a directory traversal, which may allow an attacker to remotely read arbitrary files on the file system...

6.8CVSS5.9AI score0.02077EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/06/17 12:00 a.m.•49 views

Advantech WebAccess Cross-Site Scripting Vulnerability (CNVD-2021-42395)

Advantech WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A security vulnerability exists in Advantec...

6.1CVSS5.9AI score0.00867EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/06/17 12:00 a.m.•15 views

Advantech WebAccess/SCADA 路径遍历漏洞

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A relative path traversal vulnerability...

6.8CVSS5.9AI score0.02077EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/06/17 12:00 a.m.•18 views

Advantech WebAccess/SCADA 输入验证错误漏洞

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. An open redirection vulnerability exist...

6.1CVSS5.7AI score0.00699EPSS
SaveExploits0References5
OSV
OSV
•added 2021/06/11 12:15 p.m.•18 views

CVE-2021-34540

Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard...

6.1CVSS5.8AI score0.00867EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/06/11 12:15 p.m.•8 views

CVE-2021-34540

Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard...

6.1CVSS6.4AI score0.00867EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/06/11 12:00 a.m.•16 views

Advantech WebAccess 跨站脚本漏洞

Advantech WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A security vulnerability exists in Advantec...

6.1CVSS5.7AI score0.00867EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/11 12:00 a.m.•6 views

CVE-2021-34540: Improper Neutralization of Input During Web Page Generation

Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard...

6.1CVSS5.8AI score0.00867EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/05/31 12:00 a.m.•13 views

Directory Traversal Vulnerability in Advantech WebAccess Node

Advantech WebAccess Node is a software for monitoring PLCs and other devices from Advantech in Taiwan, China. The product can realize real-time control of equipment status by monitoring PLC and other devices. A directory traversal vulnerability exists in Advantech WebAccess Node. An attacker can...

7AI score
SaveExploits0
CNVD
CNVD
•added 2021/05/31 12:00 a.m.•15 views

Arbitrary File Read Vulnerability in Advantech WebAccess Node

Advantech WebAccess Node is a software for monitoring PLCs and other devices from Advantech, Taiwan, China. The product can realize real-time control of equipment status by monitoring PLC and other devices. An arbitrary file read vulnerability exists in Advantech WebAccess Node. An attacker could...

7.1AI score
SaveExploits0
CNVD
CNVD
•added 2021/05/31 12:00 a.m.•16 views

Advantech WebAccess Node has a Logic Flaw Vulnerability

Advantech WebAccess Node is a software for monitoring PLCs and other devices from Advantech in Taiwan, China. The product can realize real-time control of equipment status by monitoring PLC and other devices. A logic flaw vulnerability exists in Advantech WebAccess Node. An attacker can exploit...

7.2AI score
SaveExploits0
CNVD
CNVD
•added 2021/05/31 12:00 a.m.•18 views

Denial of Service Vulnerability in Advantech WebAccess Node (CNVD-2021-41708)

Advantech WebAccess Node is a software for monitoring PLCs and other devices from Advantech in Taiwan, China. The product can realize real-time control of equipment status by monitoring PLC and other devices. A denial of service vulnerability exists in Advantech WebAccess Node. An attacker could...

7.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/04/27 12:00 a.m.•47 views

(0Day) Advantech WebAccess/HMI Designer PLF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

7.8CVSS5.1AI score0.0095EPSS
SaveExploits0
CNVD
CNVD
•added 2021/04/14 12:00 a.m.•17 views

Advantech WebAccess/SCADA Critical Resource Permission Assignment Incorrect Vulnerability

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A vulnerability exists in the Project...

9CVSS6.8AI score0.01174EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/04/13 12:00 a.m.•23 views

Advantech WebAccess SCADA 安全漏洞

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A vulnerability exists in the Project...

9CVSS5.7AI score0.01174EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2021/03/30 12:00 a.m.•28 views

The vulnerability of the webvrpcs component allows for privilege escalation in the software of the remote monitoring system, Advantech WebAccess. This enables a perpetrator to increase their privileges.

The vulnerability of the webvrpcs component in software for remote monitoring by Advantech WebAccess relates to insecure management of privileges. Exploiting this vulnerability can allow attackers to elevate their own privileges...

7.8CVSS7.4AI score0.00547EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
•added 2021/03/17 12:00 a.m.•64 views

Advantech WebAccess/SCADA Cross-Site Scripting Vulnerability

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A cross-site scripting vulnerability...

6.1CVSS6.1AI score0.00714EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/03/16 12:00 a.m.•18 views

研华 Advantech WebAccess/SCADA 跨站脚本漏洞

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A cross-site scripting vulnerability...

6.1CVSS5.4AI score0.00714EPSS
SaveExploits0References3
NVD
NVD
•added 2021/03/03 5:15 p.m.•42 views

CVE-2020-13554

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In webvrpcs Run Key Privilege Escalation in installation folder of WebAccess, an attacker can either replace binary or loaded modules to execute code with ...

8.8CVSS0.00547EPSS
SaveExploits1References1
OSV
OSV
•added 2021/03/03 5:15 p.m.•20 views

CVE-2020-13554

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In webvrpcs Run Key Privilege Escalation in installation folder of WebAccess, an attacker can either replace binary or loaded modules to execute code with ...

7.8CVSS7.3AI score0.00547EPSS
SaveExploits1References1
Rows per page
Query Builder