3159 matches found
PT-2025-52336
Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA affected versions not specified Description Advantech WebAccess/SCADA is susceptible to a directory traversal issue. This could allow an attacker to delete arbitrary files. Recommendations At the moment, there is no...
PT-2025-52337
Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA affected versions not specified Description Advantech WebAccess/SCADA is susceptible to a SQL injection issue. Successful exploitation could allow an attacker to execute arbitrary SQL commands. Recommendations At the...
Advantech WebAccess/SCADA path traversal vulnerability
Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. A directory traversal vulnerability exists in...
Advantech WebAccess/SCADA SQL injection vulnerability
Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. An SQL injection vulnerability exists in...
CVE-2025-67653: Improper Limitation of a Pathname to a Restricted Directory
Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence of arbitrary files...
CVE-2025-14850: Improper Limitation of a Pathname to a Restricted Directory
Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files...
CVE-2025-14849: Unrestricted Upload of File with Dangerous Type
Advantech WebAccess/SCADA is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code...
Advantech WebAccess/SCADA code-related vulnerabilities
Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. A code issue vulnerability exists in Advantech...
PT-2025-52335
Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA affected versions not specified Description Advantech WebAccess/SCADA is susceptible to a file upload issue that does not have restrictions. This could allow a remote attacker to execute code. The issue may allow for...
Advantech WebAccess/SCADA path traversal vulnerability
Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. Advantech WebAccess/SCADA suffers from a...
CVE-2025-46268: Improper Neutralization of Special Elements used in an SQL Command
Advantech WebAccess/SCADA is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands...
CVE-2025-14848: Absolute Path Traversal
Advantech WebAccess/SCADA is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary files...
PT-2025-52334
Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA affected versions not specified Description Advantech WebAccess/SCADA is susceptible to an absolute directory traversal issue. This flaw could allow an attacker to identify the existence of arbitrary files...
PT-2025-52348
Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA affected versions not specified Description Advantech WebAccess/SCADA is susceptible to a directory traversal issue. This could allow an attacker to determine if files exist on the system. Recommendations At the momen...
Advantech WebAccess/VPN AjaxFwRulesController XSS
The vulnerability of the AjaxFwRulesController.ajaxDeviceFwRulesAction function in the software for remote monitoring with virtual private network capabilities of Advantech WebAccess/VPN is related to the failure to protect the SQL query structure. Exploiting this vulnerability may allow a...
AjaxStandaloneVpnClientsController ajaxAction() database Information Disclosure
The vulnerability of the AjaxStandaloneVpnClientsController.ajaxAction function in the remote monitoring software with Virtual Private Network capabilities of Advantech WebAccess/VPN involves a lack of security measures for SQL query structures. Exploiting this vulnerability can allow an attacker...
NetworksController addNetworkAction Database Information Disclosure
The vulnerability of the NetworksController.addNetworkAction function in software for remote monitoring with virtual private networks like Advantech WebAccess/VPN is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor...
Advantech WebAccess/VPN AjaxFwRulesController XSS
The vulnerability of the AjaxFwRulesController.ajaxNetworkFwRulesAction function in the software for remote monitoring with virtual private network capabilities of Advantech WebAccess/VPN is related to the failure to protect the SQL query structure. Exploiting this vulnerability may allow a...
Advantech WebAccess/VPN AjaxPrevalidationController XSS
The vulnerability of the AjaxPrevalidationController.ajaxAction function in software for remote monitoring with Advantech WebAccess/VPN virtual private network capabilities is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability may allow a...
AjaxNetworkController ajaxAction() Remote Monitoring Database Information Disclosure
The vulnerability of the AjaxNetworkController.ajaxAction function in software for remote monitoring with virtual private network capabilities from Advantech WebAccess/VPN is related to the lack of security measures for SQL query structures. Exploiting this vulnerability could allow a malicious...