Vulnerabilities in Advantech
191 resultsCVE-2022-50595CRITICALAdvantech iView < v5.7.04 Build 6425 ztp_search_value Parameter SQL Injection RCEEPSS 0.7%CVE-2022-50592CRITICALAdvantech iView < v5.7.04 Build 6425 getInventoryReportData Parameter SQL Injection RCEEPSS 0.7%CVE-2023-2611CRITICALAdvantech R-SeeNet Use of Hard-coded CredentialsEPSS 0.7%CVE-2025-14848MEDIUMAdvantech WebAccess/SCADA Absolute Path TraversalEPSS 0.7%CVE-2026-43856HIGHA stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbEPSS 0.7%CVE-2021-42703MEDIUMAzeoTech DAQFactoryEPSS 0.6%CVE-2026-43831CRITICALA stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code executiEPSS 0.6%CVE-2026-43829CRITICALA stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution EPSS 0.6%CVE-2026-43832CRITICALA stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution EPSS 0.6%CVE-2026-14162CRITICALAdvantech｜Hospital Quering Management - Missing AuthenticationEPSS 0.6%CVE-2025-14849HIGHAdvantech WebAccess/SCADA Unrestricted Upload of File with Dangerous TypeEPSS 0.6%CVE-2018-10591—In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioEPSS 0.6%CVE-2025-53515HIGHAdvantech iView SQL InjectionEPSS 0.6%CVE-2025-52577HIGHAdvantech iView SQL InjectionEPSS 0.6%CVE-2023-4215MEDIUMAdvantech WebAccess Debug Messages Revealing Unnecessary InformationEPSS 0.6%CVE-2025-58423HIGHAdvantech DeviceOn/iEdge Path TraversalEPSS 0.6%CVE-2025-48466HIGHModbus Command Injection without AuthenticationEPSS 0.6%CVE-2026-14161HIGHAdvantech｜Hospital Queuing Management - Sensitive Data ExposureEPSS 0.5%CVE-2024-50358HIGHA CWE-15 "External Control of System or Configuration Setting" was discovered affecting the following devices manufactured by Advantech: EKIEPSS 0.5%CVE-2026-73169MEDIUMNozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilityEPSS 0.5%