Lucene search
+L

4186 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:55 a.m.•20 views

CVE-2020-12014

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Input is not properly sanitized and may allow an attacker to inject SQL commands...

7.5CVSS7.4AI score0.01529EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:52 a.m.•17 views

CVE-2020-10638

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple heap-based buffer overflow vulnerabilities exist caused by a lack of proper validation of the length of user-supplied data, which may allow remote code execution...

9.8CVSS8AI score0.07059EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:51 a.m.•21 views

CVE-2020-10607

In Advantech WebAccess, Versions 8.4.2 and prior. A stack-based buffer overflow vulnerability caused by a lack of proper validation of the length of user-supplied data may allow remote code execution...

8.8CVSS8AI score0.02123EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:05 a.m.•14 views

CVE-2024-34542

Advantech ADAM-5630 shares user credentials plain text between the device and the user source device during the login process...

6.9CVSS7AI score0.00219EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:33 a.m.•18 views

CVE-2024-39364

Advantech ADAM-5630 has built-in commands that can be executed without authenticating the user. These commands allow for restarting the operating system, rebooting the hardware, and stopping the execution. The commands can be sent to a simple HTTP request and are executed by the device...

7CVSS7.3AI score0.00219EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:32 a.m.•14 views

CVE-2019-16899

In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PMV3!CTagInfoThreadBase::GetNICInfo+0x0000000000512918...

7.5CVSS7.1AI score0.01323EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:32 a.m.•14 views

CVE-2019-16901

Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x0000000000000000 called from ntdll!RtlRaiseStatus+0x00000000000000b4...

7.5CVSS7.2AI score0.01323EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:30 a.m.•17 views

CVE-2019-16900

Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x000000000000015c...

7.5CVSS7AI score0.01323EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/12/30 12:00 a.m.•16 views

The vulnerability of the Advantech WebAccss/SCADA SCADA system, related to the unlimited loading of dangerous type files, allows a intruder to execute arbitrary code.

The vulnerability of the Advantech WebAccss/SCADA SCADA system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS6AI score0.00624EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/30 12:00 a.m.•16 views

The vulnerability of the Advantech WebAccss/SCADA SCADA system, related to incorrect restrictions on the path name to the catalog, allows a intruder to write arbitrary files.

The vulnerability of the Advantech WebAccss/SCADA SCADA system is related to incorrect restrictions on the path name to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

9CVSS5.9AI score0.00668EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/30 12:00 a.m.•14 views

The vulnerability of the Advantech WebAccss/SCADA SCADA system, related to incorrect restrictions on the path to the restricted access catalog, allows a intruder to delete any files they want.

The vulnerability of the Advantech WebAccss/SCADA SCADA system is related to incorrect restrictions on the path to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to delete any files they desire...

8.5CVSS5.8AI score0.00947EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/30 12:00 a.m.•17 views

The vulnerability of the Advantech WebAccss/SCADA SCADA system, related to the lack of protective measures for the SQL query structure, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Advantech WebAccss/SCADA SCADA system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

6.5CVSS6.2AI score0.00335EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/30 12:00 a.m.•17 views

The vulnerability of the Advantech WebAccss/SCADA SCADA system lies in the incorrect limitation of the path name to the restricted access catalog, allowing attackers to write arbitrary files.

The vulnerability of the Advantech WebAccss/SCADA SCADA system is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

6.5CVSS5.9AI score0.0073EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2025/12/25 12:00 a.m.•14 views

Advantech WebAccess/SCADA Directory Traversal Vulnerability (CNVD-2026-11781)

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. A directory traversal vulnerability exists in...

9.1CVSS6AI score0.00947EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/24 12:00 a.m.•19 views

Advantech WebAccess/SCADA Directory Traversal Vulnerability

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. Advantech WebAccess/SCADA suffers from a...

7.5CVSS6.1AI score0.0073EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/24 12:00 a.m.•27 views

Advantech WebAccess/SCADA SQL Injection Vulnerability

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. An SQL injection vulnerability exists in...

8.8CVSS6.2AI score0.00335EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/24 12:00 a.m.•13 views

Advantech WebAccess/SCADA Directory Traversal Vulnerability (CNVD-2026-11783)

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. Advantech WebAccess/SCADA suffers from a...

5.3CVSS6.1AI score0.00668EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/24 12:00 a.m.•18 views

Advantech WebAccess/SCADA Code Issue Vulnerability

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. A code issue vulnerability exists in Advantech...

9.8CVSS6.2AI score0.00624EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/19 9:14 p.m.•13 views

CVE-2025-14848

Advantech WebAccess/SCADA is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary files...

5.3CVSS7AI score0.00668EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/19 9:14 p.m.•28 views

CVE-2025-67653

Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence of arbitrary files...

7.5CVSS7AI score0.0073EPSS
SaveExploits0References1
Rows per page
Query Builder