Vulnerabilities in Advantech
191 resultsCVE-2024-50375CRITICALA CWE-306 "Missing Authentication for Critical Function" was discovered affecting the following devices manufactured by Advantech: EKI-6333AEPSS 1.0%CVE-2023-4202CRITICALStored Cross-Site ScriptingEPSS 1.0%CVE-2021-32951MEDIUMAdvantech WebAccess/NMS Improper AuthenticationEPSS 0.9%CVE-2025-14850HIGHAdvantech WebAccess/SCADA Improper Limitation of a Pathname to a Restricted DirectoryEPSS 0.9%CVE-2023-32540HIGH
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability, which could allow an attacker to overwritEPSS 0.9%CVE-2026-43836CRITICALA vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.EPSS 0.9%CVE-2018-15703—Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities. A remote unauthenticated attacEPSS 0.9%CVE-2023-22450HIGH
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an AEPSS 0.8%CVE-2023-3256HIGHAdvantech R-SeeNet External Control of File Name or PathEPSS 0.8%CVE-2025-59171HIGHAdvantech DeviceOn/iEdge Path TraversalEPSS 0.8%CVE-2022-50593CRITICALAdvantech iView < v5.7.04 Build 6425 search_term Parameter SQL Injection RCEEPSS 0.7%CVE-2025-62630HIGHAdvantech DeviceOn/iEdge Path TraversalEPSS 0.7%CVE-2025-67653MEDIUMAdvantech WebAccess/SCADA Path TraversalEPSS 0.7%CVE-2026-43858HIGHA stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.EPSS 0.7%CVE-2023-32628HIGH
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify thEPSS 0.7%CVE-2026-73173HIGHNozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol oEPSS 0.7%CVE-2026-73166HIGHNozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management inteEPSS 0.7%CVE-2021-38431MEDIUMAdvantech WebAccess SCADAEPSS 0.7%CVE-2024-50361HIGHA CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the followingEPSS 0.7%CVE-2026-43857HIGHA vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.EPSS 0.7%