advantech Vulnerability Advisory Catalog

Total 378 security vulnerabilities recorded for advantech software and firmware.

← Back to All Vendors
CVE-2018-7499 CRITICAL
Component: webaccess

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAcce...

📅 2018-05-15
CVSS 9.8 Dossier →
CVE-2018-7497 CRITICAL
Component: webaccess

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAcce...

📅 2018-05-15
CVSS 9.8 Dossier →
Component: webaccess

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAcce...

📅 2018-05-15
CVSS 7.5 Dossier →
Component: webaccess

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAcce...

📅 2018-05-15
CVSS 6.1 Dossier →
Component: webaccess

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAcce...

📅 2018-05-15
CVSS 7.5 Dossier →
CVE-2018-10589 CRITICAL
Component: webaccess

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAcce...

📅 2018-05-15
CVSS 9.8 Dossier →
Component: webaccess

Advantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an attacker to run a malicious DLL file within the search p...

📅 2018-05-09
CVSS 7.8 Dossier →
Component: webaccess_hmi_designer

Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buff...

📅 2018-04-25
CVSS 7.8 Dossier →
Component: webaccess_hmi_designer

Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote ...

📅 2018-04-25
CVSS 7.8 Dossier →
Component: webaccess_hmi_designer

Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files ma...

📅 2018-04-25
CVSS 7.8 Dossier →
CVE-2018-6911 CRITICAL
Component: webaccess

The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a single argumen...

📅 2018-02-13
CVSS 9.8 Dossier →
CVE-2018-5445 MEDIUM
Component: webaccess\/scada

A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. An attacker has read access to files within the di...

📅 2018-01-25
CVSS 5.3 Dossier →
CVE-2018-5443 MEDIUM
Component: webaccess\/scada

A SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. WebAccess/SCADA does not properly sanitize its inpu...

📅 2018-01-25
CVSS 5.3 Dossier →
Component: webaccess

An Unrestricted Upload Of File With Dangerous Type issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows a remote attack...

📅 2018-01-12
CVSS 7.5 Dossier →
Component: webaccess

A use-after-free issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows an unauthenticated attacker to specify an arbitra...

📅 2018-01-12
CVSS 6.5 Dossier →
Component: webaccess

An Improper Input Validation issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows some inputs that may cause the progra...

📅 2018-01-05
CVSS 7.5 Dossier →
Component: webaccess

An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow ...

📅 2018-01-05
CVSS 7.5 Dossier →
CVE-2017-16724 CRITICAL
Component: webaccess

A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple instances of a vulnerability that ...

📅 2018-01-05
CVSS 9.8 Dossier →
CVE-2017-16720 CRITICAL
Component: webaccess

A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within the directory structure of the t...

📅 2018-01-05
CVSS 9.8 Dossier →
CVE-2017-16716 CRITICAL
Component: webaccess

A SQL Injection issue was discovered in WebAccess versions prior to 8.3. WebAccess does not properly sanitize its inputs for SQL commands....

📅 2018-01-05
CVSS 9.8 Dossier →
Component: webaccess

A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The application lacks proper validation of ...

📅 2017-11-06
CVSS 6.3 Dossier →
Component: webaccess

An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute cod...

📅 2017-11-06
CVSS 7.5 Dossier →
Component: webop

A Heap-Based Buffer Overflow issue was discovered in Advantech WebOP. A maliciously crafted project file may be able to trigger a heap-based buffer ov...

📅 2017-10-25
CVSS 7.8 Dossier →
Component: webaccess

An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A maliciously crafted dll file placed...

📅 2017-08-30
CVSS 7.8 Dossier →
Page 12 of 16 (378 Total Records)