CVE-2019-6552: vulnerability in Advantech WebAccess/SCADA
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.3%
Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple command injection vulnerabilities, caused by a lack of proper validation of user-supplied data, may allow remote code execution.
Affected products
Advantech · WebAccess/SCADARelated CVEs — Advantech WebAccess/SCADA
In the same product, most dangerous first.
CVE-2019-6550—CVE-2019-6550EPSS 6.1%CVE-2019-3975—CVE-2019-3975EPSS 4.6%CVE-2023-1437CRITICALCVE-2023-1437EPSS 2.8%CVE-2019-6554—CVE-2019-6554EPSS 1.6%CVE-2025-14850HIGHAdvantech WebAccess/SCADA Improper Limitation of a Pathname to a Restricted DirectoryEPSS 0.9%CVE-2023-32540HIGHCVE-2023-32540EPSS 0.9%