advantech Vulnerability Advisory Catalog

Total 378 security vulnerabilities recorded for advantech software and firmware.

← Back to All Vendors
CVE-2019-3940 CRITICAL
Component: webaccess

Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call. An unauthenticated, remote attacker can use this vulnerab...

📅 2019-04-09
CVSS 9.8 Dossier →
Component: webaccess

Advantech WebAccess/SCADA, Versions 8.3.5 and prior. An improper access control vulnerability may allow an attacker to cause a denial-of-service condi...

📅 2019-04-05
CVSS 7.5 Dossier →
CVE-2019-6552 CRITICAL
Component: webaccess

Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple command injection vulnerabilities, caused by a lack of proper validation of user-supplie...

📅 2019-04-05
CVSS 9.8 Dossier →
CVE-2019-6550 CRITICAL
Component: webaccess

Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple stack-based buffer overflow vulnerabilities, caused by a lack of proper validation of th...

📅 2019-04-05
CVSS 9.8 Dossier →
CVE-2019-6523 CRITICAL
Component: webaccess\/scada

WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands....

📅 2019-02-05
CVSS 9.8 Dossier →
Component: webaccess\/scada

WebAccess/SCADA, Version 8.3. Specially crafted requests could allow a possible authentication bypass that could allow an attacker to obtain and manip...

📅 2019-02-05
CVSS 8.6 Dossier →
CVE-2019-6519 CRITICAL
Component: webaccess\/scada

WebAccess/SCADA, Version 8.3. An improper authentication vulnerability exists that could allow a possible authentication bypass allowing an attacker t...

📅 2019-02-05
CVSS 9.8 Dossier →
Component: webaccess\/scada

WebAccess/SCADA, WebAccess/SCADA Version 8.3.2 installed on Windows 2008 R2 SP1. Lack of proper validation of user supplied input may allow an attacke...

📅 2018-12-19
CVSS 7.3 Dossier →
Component: webaccess

Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page. An attacker could leverage this vulnerability t...

📅 2018-10-31
CVSS 5.4 Dossier →
Component: webaccess

WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to read any file on the filesystem due to a directory tra...

📅 2018-10-31
CVSS 6.5 Dossier →
Component: webaccess

WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a...

📅 2018-10-31
CVSS 6.5 Dossier →
Component: webaccess

WebAccess Versions 8.3.2 and prior. The application fails to properly validate the length of user-supplied data, causing a buffer overflow condition t...

📅 2018-10-29
CVSS 7.8 Dossier →
Component: webaccess

WebAccess Versions 8.3.2 and prior. During installation, the application installer disables user access control and does not re-enable it after the in...

📅 2018-10-29
CVSS 7.8 Dossier →
Component: webaccess

Advantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which may allow an attacker to access those files and perfor...

📅 2018-10-23
CVSS 7.8 Dossier →
Component: webaccess

Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, which may allow...

📅 2018-10-23
CVSS 7.5 Dossier →
CVE-2018-14816 CRITICAL
Component: webaccess

Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities that have been identified, which may allow an attacker t...

📅 2018-10-23
CVSS 9.8 Dossier →
CVE-2018-14806 CRITICAL
Component: webaccess

Advantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an attacker to execute arbitrary code....

📅 2018-10-23
CVSS 9.8 Dossier →
Component: webaccess

Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attacker could potentially exploit ...

📅 2018-10-22
CVSS 8.8 Dossier →
Component: webaccess

Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities. A remote unauthenticated attacker could ...

📅 2018-10-22
CVSS 6.1 Dossier →
CVE-2018-8845 CRITICAL
Component: webaccess

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAcce...

📅 2018-05-15
CVSS 9.8 Dossier →
Component: webaccess

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAcce...

📅 2018-05-15
CVSS 7.8 Dossier →
CVE-2018-7505 CRITICAL
Component: webaccess

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAcce...

📅 2018-05-15
CVSS 9.8 Dossier →
Component: webaccess

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAcce...

📅 2018-05-15
CVSS 7.5 Dossier →
Component: webaccess

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAcce...

📅 2018-05-15
CVSS 7.5 Dossier →
Page 11 of 16 (378 Total Records)