Lucene search
+L

1863 matches found

CNNVD
CNNVD
•added 2025/12/18 12:00 a.m.•16 views

Advantech WebAccess/SCADA 安全漏洞

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. Advantech WebAccess/SCADA suffers from a...

5.3CVSS6AI score0.00668EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/18 12:00 a.m.•14 views

Advantech WebAccess/SCADA 代码问题漏洞

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. A code issue vulnerability exists in Advantech...

9.8CVSS6.2AI score0.00624EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•20 views

PT-2025-52335

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA affected versions not specified Description Advantech WebAccess/SCADA is susceptible to a file upload issue that does not have restrictions. This could allow a remote attacker to execute code. The issue may allow for...

8.8CVSS7.3AI score0.00624EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•29 views

PT-2025-52336

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA affected versions not specified Description Advantech WebAccess/SCADA is susceptible to a directory traversal issue. This could allow an attacker to delete arbitrary files. Recommendations At the moment, there is no...

8.1CVSS6.5AI score0.00947EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/12/18 12:00 a.m.•17 views

Advantech WebAccess/SCADA 路径遍历漏洞

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. Advantech WebAccess/SCADA suffers from a...

7.5CVSS6AI score0.0073EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•2 views

CVE-2025-14848: Absolute Path Traversal

Advantech WebAccess/SCADA is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary files...

5.3CVSS5.9AI score0.00668EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•2 views

CVE-2025-14850: Improper Limitation of a Pathname to a Restricted Directory

Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files...

9.1CVSS5.9AI score0.00947EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•1 views

CVE-2025-46268: Improper Neutralization of Special Elements used in an SQL Command

Advantech WebAccess/SCADA is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands...

8.8CVSS6.3AI score0.00335EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/05 12:00 a.m.•18 views

PT-2025-52348

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA affected versions not specified Description Advantech WebAccess/SCADA is susceptible to a directory traversal issue. This could allow an attacker to determine if files exist on the system. Recommendations At the momen...

7.5CVSS6.4AI score0.0073EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2025/11/28 12:00 a.m.•16 views

The vulnerability of the AjaxPrevalidationController.ajaxAction() function in the software for remote monitoring with virtual private network capabilities, Advantech WebAccess/VPN, allows a perpetrator to gain access to database-related information.

The vulnerability of the AjaxPrevalidationController.ajaxAction function in software for remote monitoring with Advantech WebAccess/VPN virtual private network capabilities is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability may allow a...

5.5CVSS5.8AI score0.00291EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/28 12:00 a.m.•13 views

The vulnerability of the NetworksController.addNetworkAction() function in software for remote monitoring with virtual private network capabilities, such as Advantech WebAccess/VPN, allows a intruder to gain access to database-related information.

The vulnerability of the NetworksController.addNetworkAction function in software for remote monitoring with virtual private networks like Advantech WebAccess/VPN is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor...

5.5CVSS5.9AI score0.00295EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/28 12:00 a.m.•13 views

The vulnerability of the AjaxNetworkController.ajaxAction() function in software for remote monitoring with virtual private network capabilities, such as Advantech WebAccess/VPN, allows a perpetrator to gain access to database-related information.

The vulnerability of the AjaxNetworkController.ajaxAction function in software for remote monitoring with virtual private network capabilities from Advantech WebAccess/VPN is related to the lack of security measures for SQL query structures. Exploiting this vulnerability could allow a malicious...

8.5CVSS5.9AI score0.00291EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/28 12:00 a.m.•13 views

The vulnerability of the AjaxStandaloneVpnClientsController.ajaxAction() function in the remote monitoring software with Advantech WebAccess/VPN virtual private network capabilities allows a perpetrator to access information related to the database.

The vulnerability of the AjaxStandaloneVpnClientsController.ajaxAction function in the remote monitoring software with Virtual Private Network capabilities of Advantech WebAccess/VPN involves a lack of security measures for SQL query structures. Exploiting this vulnerability can allow an attacker...

5.5CVSS5.9AI score0.00291EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/28 12:00 a.m.•16 views

The vulnerability of the AjaxFwRulesController.ajaxNetworkFwRulesAction() function in the software for remote monitoring with virtual private network capabilities from Advantech WebAccess/VPN allows a intruder to access information related to the database.

The vulnerability of the AjaxFwRulesController.ajaxNetworkFwRulesAction function in the software for remote monitoring with virtual private network capabilities of Advantech WebAccess/VPN is related to the failure to protect the SQL query structure. Exploiting this vulnerability may allow a...

5.5CVSS5.8AI score0.00291EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/28 12:00 a.m.•15 views

The vulnerability of the AjaxFwRulesController.ajaxDeviceFwRulesAction() function in the software for remote monitoring with virtual private network capabilities from Advantech WebAccess/VPN allows a perpetrator to access information related to the database.

The vulnerability of the AjaxFwRulesController.ajaxDeviceFwRulesAction function in the software for remote monitoring with virtual private network capabilities of Advantech WebAccess/VPN is related to the failure to protect the SQL query structure. Exploiting this vulnerability may allow a...

5.5CVSS5.8AI score0.00291EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/12 12:00 a.m.•17 views

The vulnerability of the NetworksController.addNetworkAction() function in software for remote monitoring with virtual private network capabilities, such as Advantech WebAccess/VPN, allows a attacker to execute XSS attacks.

The vulnerability of the NetworksController.addNetworkAction function in software for remote monitoring with the Advantech WebAccess/VPN virtual private network exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor ...

8.5CVSS5.8AI score0.00205EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/12 12:00 a.m.•15 views

The vulnerability of the AjaxDeviceController.ajaxDeviceAction() function in the software for remote monitoring with virtual private network capabilities, Advantech WebAccess/VPN, allows a perpetrator to gain access to database-related information.

The vulnerability of the AjaxDeviceController.ajaxDeviceAction function in the software for remote monitoring with Advantech WebAccess/VPN virtual private network capabilities is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability could allow a...

5.5CVSS5.9AI score0.00291EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/12 12:00 a.m.•12 views

The vulnerability of the AjaxDeviceController.ajaxActionValidateTable() function in the software for remote monitoring with Advantech WebAccess/VPN virtual private network capabilities allows a perpetrator to gain access to database-related information.

The vulnerability of the AjaxDeviceController.ajaxActionValidateTable function in the software for remote monitoring with Advantech WebAccess/VPN virtual private network capabilities is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability may all...

8.5CVSS5.8AI score0.00291EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/12 12:00 a.m.•15 views

The vulnerability of the `StandaloneVpnClientsController.addStandaloneVpnClientAction()` function in the remote monitoring software with virtual private network capabilities, Advantech WebAccess/VPN, allows a attacker to execute XSS attacks.

The vulnerability of the StandaloneVpnClientsController.addStandaloneVpnClientAction function in the remote monitoring software with Virtual Private Network capabilities from Advantech WebAccess/VPN exists due to the lack of measures taken to protect the website structure. Exploiting this...

8.5CVSS5.8AI score0.00202EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
•added 2025/11/11 12:00 a.m.•56 views

Advantech WebAccess/VPN AjaxStandaloneVpnClientsController.ajaxAction function SQL injection vulnerability

Advantech WebAccess/VPN is a virtual private network feature integrated in Advantech WebAccess/SCADA software, designed to provide a secure and reliable network connectivity solution for industrial automation and remote monitoring systems. Advantech WebAccess/VPN suffers from a SQL injection...

6.5CVSS8.4AI score0.00291EPSS
SaveExploits0References1
Rows per page
Query Builder