Vulnerabilities in Advantech
191 resultsCVE-2026-73170HIGHNozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import wEPSS 0.5%CVE-2022-50591HIGHAdvantech iView < v5.7.04 Build 6425 ztp_config_id Parameter SQL Injection Information DisclosureEPSS 0.5%CVE-2026-73171HIGHNozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKEPSS 0.5%CVE-2026-43844CRITICALA vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.EPSS 0.5%CVE-2026-43833HIGHA stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution.EPSS 0.5%CVE-2022-50594HIGHAdvantech iView < v5.7.04 Build 6425 data Parameter SQL Injection Information DisclosureEPSS 0.5%CVE-2025-48469CRITICALUnauthenticated Firmware UploadEPSS 0.5%CVE-2026-43855HIGHA heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.EPSS 0.5%CVE-2025-48461MEDIUMWeak Session Cookie EntropyEPSS 0.5%CVE-2025-13373HIGHAdvantech iView SQL InjectionEPSS 0.5%CVE-2026-43846HIGHA stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.EPSS 0.5%CVE-2024-50376HIGHA CWE-79 "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" was discovered affecting the following devicEPSS 0.5%CVE-2026-43845CRITICALA vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.EPSS 0.5%CVE-2026-43837HIGHA buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve codeEPSS 0.4%CVE-2026-43851HIGHA path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.EPSS 0.4%CVE-2026-43852HIGHA vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.EPSS 0.4%CVE-2024-39275HIGHAdvantech ADAM-5630 Use of Persistent Cookies Containing Sensitive InformationEPSS 0.4%CVE-2025-34238MEDIUMAdvantech WebAccess/VPN < 1.1.5 Path Traversal via AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction()EPSS 0.4%CVE-2018-14828—Advantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which may allow an attacker to access those files EPSS 0.4%CVE-2026-43849MEDIUMA heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.EPSS 0.4%