Vulnerabilities in Advantech
191 resultsCVE-2025-48462MEDIUMLogin Session ExhaustionEPSS 0.2%CVE-2025-48470MEDIUMStored Cross site Scripting (XSS)EPSS 0.2%CVE-2024-50377MEDIUMA CWE-798 "Use of Hard-coded Credentials" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3)EPSS 0.2%CVE-2025-48468MEDIUMOpen JTAG Debug PortEPSS 0.2%CVE-2026-43835HIGHA vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentEPSS 0.2%CVE-2026-73174HIGHNozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocoEPSS 0.2%CVE-2026-73177HIGHNozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism ofEPSS 0.1%CVE-2023-2866HIGHAdvantech WebAccess Insufficient Type DistinctionEPSS 0.1%CVE-2025-14252HIGHAn Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary memory, I/O ports, andEPSS 0.1%CVE-2025-48463LOWUnencrypted HTTP CommunicationEPSS 0.1%CVE-2026-43854MEDIUMA vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled EPSS 0.1%