CVE-2021-32956

Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to redirection, which may allow an attacker to send a maliciously crafted URL that could result in redirecting a user to a malicious webpage...

CVE-2021-32954

Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to a directory traversal, which may allow an attacker to remotely read arbitrary files on the file system...

Advantech WebAccess/SCADA Open Redirect Vulnerability

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. An open redirection vulnerability exist...

Advantech WebAccess/SCADA Relative Path Traversal Vulnerability

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A relative path traversal vulnerability...

CVE-2021-32956: URL Redirection to Untrusted Site

Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to redirection, which may allow an attacker to send a maliciously crafted URL that could result in redirecting a user to a malicious webpage...

CVE-2021-32954: Relative Path Traversal

Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to a directory traversal, which may allow an attacker to remotely read arbitrary files on the file system...

PT-2021-19999

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA versions 9.0.1 and prior Description The issue allows an attacker to send a maliciously crafted URL that could result in redirecting a user to a malicious webpage through redirection. Recommendations For Advantech...

PT-2021-19997

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA versions 9.0.1 and prior Description The issue allows an attacker to remotely read arbitrary files on the file system due to a directory traversal. Recommendations For Advantech WebAccess/SCADA versions 9.0.1 and prio...

Advantech WebAccess Cross-Site Scripting Vulnerability (CNVD-2021-42395)

Advantech WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A security vulnerability exists in Advantec...

Advantech WebAccess/SCADA 路径遍历漏洞

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A relative path traversal vulnerability...

Advantech WebAccess/SCADA 输入验证错误漏洞

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. An open redirection vulnerability exist...

CVE-2021-34540

Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard...

CVE-2021-34540

Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard...

CVE-2021-34540: Improper Neutralization of Input During Web Page Generation

Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard...

PT-2021-20537

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess versions 8.4.2 through 8.4.4 Description: The issue allows for cross-site scripting XSS attacks via the username column of the "bwRoot.asp" page of WADashboard. This occurs because the application does not properly validat...

Advantech WebAccess 跨站脚本漏洞

Advantech WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A security vulnerability exists in Advantec...

Denial of Service Vulnerability in Advantech WebAccess Node (CNVD-2021-41708)

Advantech WebAccess Node is a software for monitoring PLCs and other devices from Advantech in Taiwan, China. The product can realize real-time control of equipment status by monitoring PLC and other devices. A denial of service vulnerability exists in Advantech WebAccess Node. An attacker could...

Advantech WebAccess Node has a Logic Flaw Vulnerability

Advantech WebAccess Node is a software for monitoring PLCs and other devices from Advantech in Taiwan, China. The product can realize real-time control of equipment status by monitoring PLC and other devices. A logic flaw vulnerability exists in Advantech WebAccess Node. An attacker can exploit...

Directory Traversal Vulnerability in Advantech WebAccess Node

Advantech WebAccess Node is a software for monitoring PLCs and other devices from Advantech in Taiwan, China. The product can realize real-time control of equipment status by monitoring PLC and other devices. A directory traversal vulnerability exists in Advantech WebAccess Node. An attacker can...

Arbitrary File Read Vulnerability in Advantech WebAccess Node

Advantech WebAccess Node is a software for monitoring PLCs and other devices from Advantech, Taiwan, China. The product can realize real-time control of equipment status by monitoring PLC and other devices. An arbitrary file read vulnerability exists in Advantech WebAccess Node. An attacker could...