advantech Vulnerability Advisory Catalog

Total 378 security vulnerabilities recorded for advantech software and firmware.

← Back to All Vendors
CVE-2016-0854 CRITICAL
Component: webaccess

Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech...

📅 2016-01-15
CVSS 9.8 Dossier →
Component: webaccess

Advantech WebAccess before 8.1 allows remote attackers to obtain sensitive information via crafted input....

📅 2016-01-15
CVSS 7.5 Dossier →
Component: webaccess

Advantech WebAccess before 8.1 allows remote attackers to bypass an intended administrative requirement and obtain file or folder access via unspecifi...

📅 2016-01-15
CVSS 7.5 Dossier →
Component: webaccess

Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service (out-of-bounds memory access) via unspecified vectors....

📅 2016-01-15
CVSS 7.5 Dossier →
Component: webaccess

Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code via vectors involving a browser plugin....

📅 2016-01-15
CVSS 8.1 Dossier →
CVE-2015-3948 MEDIUM
Component: webaccess

Cross-site scripting (XSS) vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to inject arbitrary web script or HTML vi...

📅 2016-01-15
CVSS 5.4 Dossier →
Component: webaccess

SQL injection vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vect...

📅 2016-01-15
CVSS 8.1 Dossier →
Component: webaccess

Cross-site request forgery (CSRF) vulnerability in Advantech WebAccess before 8.1 allows remote attackers to hijack the authentication of unspecified ...

📅 2016-01-15
CVSS 8.8 Dossier →
CVE-2015-3943 MEDIUM
Component: webaccess

Advantech WebAccess before 8.1 allows remote attackers to read sensitive cleartext information about e-mail project accounts via unspecified vectors....

📅 2016-01-15
CVSS 5.3 Dossier →
CVE-2015-7938 CRITICAL
Component: eki-1321_series_firmware

Advantech EKI-132x devices with firmware before 2015-12-31 allow remote attackers to bypass authentication via unspecified vectors....

📅 2016-01-09
CVSS 9.8 Dossier →
CVE-2015-6476 UNKNOWN
Component: eki-1321_series_firmware

Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 ha...

📅 2015-11-07
CVSS 10.0 Dossier →
CVE-2014-9202 UNKNOWN
Component: webaccess

Multiple stack-based buffer overflows in an unspecified DLL file in Advantech WebAccess before 8.0_20150816 allow remote attackers to execute arbitrar...

📅 2015-09-28
CVSS 6.9 Dossier →
CVE-2014-9208 UNKNOWN
Component: webaccess

Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attackers to execute arbitrary code vi...

📅 2015-09-11
CVSS 10.0 Dossier →
CVE-2014-8385 UNKNOWN
Component: eki-1200_gateway_series_firmware

Buffer overflow on Advantech EKI-1200 gateways with firmware before 1.63 allows remote attackers to execute arbitrary code via unspecified vectors....

📅 2015-02-13
CVSS 10.0 Dossier →
CVE-2014-8386 UNKNOWN
Component: adamview

Multiple stack-based buffer overflows in Advantech AdamView 4.3 and earlier allow remote attackers to execute arbitrary code via a crafted (1) display...

📅 2015-01-20
CVSS 7.5 Dossier →
CVE-2014-8388 UNKNOWN
Component: webaccess

Stack-based buffer overflow in Advantech WebAccess, formerly BroadWin WebAccess, before 8.0 allows remote attackers to execute arbitrary code via a cr...

📅 2014-11-21
CVSS 7.2 Dossier →
CVE-2014-8387 UNKNOWN
Component: eki-6340_firmware

cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitrary commands via shell metachara...

📅 2014-11-20
CVSS 9.0 Dossier →
CVE-2014-0992 UNKNOWN
Component: advantech_webaccess

Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the passwor...

📅 2014-09-20
CVSS 6.8 Dossier →
CVE-2014-0991 UNKNOWN
Component: advantech_webaccess

Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the project...

📅 2014-09-20
CVSS 6.8 Dossier →
CVE-2014-0990 UNKNOWN
Component: advantech_webaccess

Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the UserNam...

📅 2014-09-20
CVSS 6.8 Dossier →
CVE-2014-0989 UNKNOWN
Component: advantech_webaccess

Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessC...

📅 2014-09-20
CVSS 6.8 Dossier →
CVE-2014-0988 UNKNOWN
Component: advantech_webaccess

Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessC...

📅 2014-09-20
CVSS 6.8 Dossier →
CVE-2014-0987 UNKNOWN
Component: advantech_webaccess

Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeNam...

📅 2014-09-20
CVSS 6.8 Dossier →
CVE-2014-0986 UNKNOWN
Component: advantech_webaccess

Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the GotoCmd...

📅 2014-09-20
CVSS 6.8 Dossier →
Page 14 of 16 (378 Total Records)