Advantech

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-34542 1Advantech 1Adam 5630 Firmware Jun 17, 2026 Sep 27, 2024 6.9 MEDIUM· v4 5.7 MEDIUM· v3 N/A· v2 Advantech ADAM-5630 shares user credentials plain text between the device and the user source device during the login process.
CVE-2024-28948 1Advantech 1Adam 5630 Firmware Jun 17, 2026 Sep 27, 2024 8.5 HIGH· v4 8.8 HIGH· v3 N/A· v2 Advantech ADAM-5630 contains a cross-site request forgery (CSRF) vulnerability. It allows an attacker to partly circumvent the same origin policy, which is designed to prevent different websites from interfering with e...Show more Advantech ADAM-5630 contains a cross-site request forgery (CSRF) vulnerability. It allows an attacker to partly circumvent the same origin policy, which is designed to prevent different websites from interfering with each other.Show less
CVE-2023-5642 1Advantech 1R Seenet Jun 17, 2026 Oct 18, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Advantech R-SeeNet v2.4.23 allows an unauthenticated remote attacker to read from and write to the snmpmon.ini file, which contains sensitive information.
CVE-2023-4215 1Advantech 1Webaccess Jun 17, 2026 Oct 17, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Advantech WebAccess version 9.1.3 contains an exposure of sensitive information to an unauthorized actor vulnerability that could leak user credentials.
CVE-2023-4203 1Advantech 3Eki 1521 Firmware Eki 1522 FirmwareEki 1524 Firmware Jun 17, 2026 Aug 8, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the ping tool of the web-interface.
CVE-2023-4202 1Advantech 3Eki 1521 Firmware Eki 1522 FirmwareEki 1524 Firmware Jun 17, 2026 Aug 8, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the device name field of the web-interface.
CVE-2023-1437 1Advantech 1Webaccess/scada Jun 17, 2026 Aug 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent could contain raw memory pointers for the server to use as-is. This could allow an a...Show more All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent could contain raw memory pointers for the server to use as-is. This could allow an attacker to gain access to the remote file system and the ability to execute commands and overwrite files. Show less
CVE-2023-3983 1Advantech 1Iview Jun 17, 2026 Jul 31, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752. An authenticated remote attacker can bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform...Show more An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752. An authenticated remote attacker can bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform blind SQL injection.Show less
CVE-2023-3256 1Advantech 1R Seenet Jun 17, 2026 Jun 22, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files.
CVE-2023-2611 1Advantech 1R Seenet Jun 17, 2026 Jun 22, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Advantech R-SeeNet versions 2.4.22 is installed with a hidden root-level user that is not available in the users list. This hidden user has a password that cannot be changed by users.
CVE-2023-2866 1Advantech 1Webaccess Jun 17, 2026 Jun 7, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker full control of the SCADA server.
CVE-2023-32628 1Advantech 1Webaccess/scada Jun 17, 2026 Jun 6, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify the file extension of a certificate file to ASP when uploading it, which can lead...Show more In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify the file extension of a certificate file to ASP when uploading it, which can lead to remote code execution. Show less
CVE-2023-32540 1Advantech 1Webaccess/scada Jun 17, 2026 Jun 6, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability, which could allow an attacker to overwrite any file in the operating system (including system files), inject code into an...Show more In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability, which could allow an attacker to overwrite any file in the operating system (including system files), inject code into an XLS file, and modify the file extension, which could lead to arbitrary code execution. Show less
CVE-2023-22450 1Advantech 1Webaccess/scada Jun 17, 2026 Jun 6, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an ASP script file to a webserver when logged in as manager user, which can lead to...Show more In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an ASP script file to a webserver when logged in as manager user, which can lead to arbitrary code execution. Show less
CVE-2023-2575 1Advantech 3Eki 1521 Firmware Eki 1522 FirmwareEki 1524 Firmware Jun 17, 2026 May 8, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated users via a crafted POST request.
CVE-2023-2574 1Advantech 3Eki 1521 Firmware Eki 1522 FirmwareEki 1524 Firmware Jun 17, 2026 May 8, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the device name input field, which can be triggered by authenticated users via a crafted POST request.
CVE-2023-2573 1Advantech 3Eki 1521 Firmware Eki 1522 FirmwareEki 1524 Firmware Jun 17, 2026 May 8, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the NTP server input field, which can be triggered by authenticated users via a crafted POST request.
CVE-2022-3387 1Advantech 1R Seenet Jun 17, 2026 Oct 27, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Advantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks. An unauthorized attacker could remotely exploit vulnerable PHP code to delete .PDF files.
CVE-2022-3386 1Advantech 1R Seenet Jun 17, 2026 Oct 27, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can use an outsized filename to overflow the stack buffer and enable remote code execution.
CVE-2022-3385 1Advantech 1R Seenet Jun 17, 2026 Oct 27, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can remotely overflow the stack buffer and enable remote code execution.

Previous 1...456...19 Next