advantech Vulnerability Advisory Catalog

Total 378 security vulnerabilities recorded for advantech software and firmware.

← Back to All Vendors
Component: spectre_rt_ert351_firmware

In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, ...

📅 2021-03-17
CVSS 6.1 Dossier →
Component: spectre_rt_ert351_firmware

Advantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in clear text form, which may allow an attacker to intercept...

📅 2021-03-17
CVSS 7.5 Dossier →
Component: webaccess\/scada

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In webvr...

📅 2021-03-03
CVSS 7.8 Dossier →
CVE-2021-22667 CRITICAL
Component: bb-eswgp506-2sfp-t_firmware

BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized...

📅 2021-02-24
CVSS 9.8 Dossier →
Component: webaccess\/scada

The WADashboard component of WebAccess/SCADA Versions 9.0 and prior may allow an attacker to control or influence a path used in an operation on the f...

📅 2021-02-23
CVSS 8.8 Dossier →
Component: webaccess\/scada

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In COM S...

📅 2021-02-17
CVSS 8.8 Dossier →
Component: webaccess\/scada

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In webvr...

📅 2021-02-17
CVSS 8.8 Dossier →
Component: webaccess\/scada

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privi...

📅 2021-02-17
CVSS 8.8 Dossier →
Component: webaccess\/scada

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privi...

📅 2021-02-17
CVSS 8.8 Dossier →
Component: webaccess\/scada

A local file inclusion vulnerability exists in the installation functionality of Advantech WebAccess/SCADA 9.0.1. A specially crafted application can ...

📅 2021-02-17
CVSS 7.7 Dossier →
CVE-2021-22658 CRITICAL
Component: iview

Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Administrator...

📅 2021-02-11
CVSS 9.8 Dossier →
Component: iview

Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files....

📅 2021-02-11
CVSS 7.5 Dossier →
Component: iview

Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information....

📅 2021-02-11
CVSS 7.5 Dossier →
CVE-2021-22652 CRITICAL
Component: iview

Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to cha...

📅 2021-02-11
CVSS 9.8 Dossier →
Component: r-seenet

The R-SeeNet webpage (1.5.1 through 2.4.10) suffers from SQL injection, which allows a remote attacker to invoke queries on the database and retrieve ...

📅 2020-10-20
CVSS 7.5 Dossier →
Component: webaccess

WebAccess Node (All versions prior to 9.0.1) has incorrect permissions set for resources used by specific services, which may allow code execution wit...

📅 2020-09-22
CVSS 7.8 Dossier →
CVE-2020-16245 CRITICAL
Component: iview

Advantech iView, Versions 5.7 and prior. The affected product is vulnerable to path traversal vulnerabilities that could allow an attacker to create/d...

📅 2020-08-25
CVSS 9.8 Dossier →
Component: webaccess\/hmi_designer

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied d...

📅 2020-08-06
CVSS 7.8 Dossier →
Component: webaccess\/hmi_designer

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project files may al...

📅 2020-08-06
CVSS 7.8 Dossier →
Component: webaccess\/hmi_designer

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied d...

📅 2020-08-06
CVSS 7.8 Dossier →
Component: webaccess\/hmi_designer

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted project files lacking proper validation of user supplied d...

📅 2020-08-06
CVSS 7.8 Dossier →
Component: webaccess\/hmi_designer

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. An out-of-bounds read vulnerability may be exploited by processing specially crafted pr...

📅 2020-08-06
CVSS 5.5 Dossier →
Component: webaccess\/hmi_designer

Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by opening special...

📅 2020-08-06
CVSS 7.8 Dossier →
CVE-2020-14503 CRITICAL
Component: iview

Advantech iView, versions 5.6 and prior, has an improper input validation vulnerability. Successful exploitation of this vulnerability could allow an ...

📅 2020-07-15
CVSS 9.8 Dossier →
Page 8 of 16 (378 Total Records)