# cve.now: Advantech

The newest entries naming Advantech as an affected vendor (up to 200), of 202 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-43858](https://cve.now/CVE-2026-43858.md): A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution. (CVSS 8.6)
- [CVE-2026-43857](https://cve.now/CVE-2026-43857.md): A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service. (CVSS 8.6)
- [CVE-2026-43856](https://cve.now/CVE-2026-43856.md): A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arb (CVSS 8.6)
- [CVE-2026-43855](https://cve.now/CVE-2026-43855.md): A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution. (CVSS 7.5)
- [CVE-2026-43854](https://cve.now/CVE-2026-43854.md): A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled (CVSS 6.3)
- [CVE-2026-43853](https://cve.now/CVE-2026-43853.md): A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash. (CVSS 8.2)
- [CVE-2026-43852](https://cve.now/CVE-2026-43852.md): A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system. (CVSS 8.2)
- [CVE-2026-43851](https://cve.now/CVE-2026-43851.md): A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system. (CVSS 8.2)
- [CVE-2026-43850](https://cve.now/CVE-2026-43850.md): A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system. (CVSS 8.6)
- [CVE-2026-43849](https://cve.now/CVE-2026-43849.md): A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data. (CVSS 6.9)
- [CVE-2026-43848](https://cve.now/CVE-2026-43848.md): A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service. (CVSS 6.9)
- [CVE-2026-43847](https://cve.now/CVE-2026-43847.md): A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even whe (CVSS 8.2)
- [CVE-2026-43846](https://cve.now/CVE-2026-43846.md): A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution. (CVSS 8.6)
- [CVE-2026-43845](https://cve.now/CVE-2026-43845.md): A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism. (CVSS 9.2)
- [CVE-2026-43844](https://cve.now/CVE-2026-43844.md): A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism. (CVSS 9.3)
- [CVE-2026-43843](https://cve.now/CVE-2026-43843.md): An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service. (CVSS 6.9)
- [CVE-2026-43842](https://cve.now/CVE-2026-43842.md): A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the (CVSS 6.9)
- [CVE-2026-43841](https://cve.now/CVE-2026-43841.md): A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the (CVSS 6.9)
- [CVE-2026-43840](https://cve.now/CVE-2026-43840.md): A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the (CVSS 6.9)
- [CVE-2026-43839](https://cve.now/CVE-2026-43839.md): A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service. (CVSS 8.7)
- [CVE-2026-43838](https://cve.now/CVE-2026-43838.md): A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution. (CVSS 9.2)
- [CVE-2026-43837](https://cve.now/CVE-2026-43837.md): A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code (CVSS 7.5)
- [CVE-2026-43836](https://cve.now/CVE-2026-43836.md): A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges. (CVSS 9.3)
- [CVE-2026-43835](https://cve.now/CVE-2026-43835.md): A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potent (CVSS 8.6)
- [CVE-2026-43834](https://cve.now/CVE-2026-43834.md): A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code executi (CVSS 7.5)
- [CVE-2026-73177](https://cve.now/CVE-2026-73177.md): Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of (CVSS 8.6)
- [CVE-2026-73176](https://cve.now/CVE-2026-73176.md): Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera (CVSS 8.6)
- [CVE-2026-73175](https://cve.now/CVE-2026-73175.md): Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI- (CVSS 7.1)
- [CVE-2026-73174](https://cve.now/CVE-2026-73174.md): Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protoco (CVSS 8.7)
- [CVE-2026-73173](https://cve.now/CVE-2026-73173.md): Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol o (CVSS 8.8)
- [CVE-2026-73172](https://cve.now/CVE-2026-73172.md): Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera (CVSS 9.3)
- [CVE-2026-73171](https://cve.now/CVE-2026-73171.md): Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EK (CVSS 8.6)
- [CVE-2026-73170](https://cve.now/CVE-2026-73170.md): Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import w (CVSS 8.6)
- [CVE-2026-73169](https://cve.now/CVE-2026-73169.md): Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability (CVSS 6.3)
- [CVE-2026-73167](https://cve.now/CVE-2026-73167.md): Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera (CVSS 8.6)
- [CVE-2026-73166](https://cve.now/CVE-2026-73166.md): Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management inte (CVSS 8.6)
- [CVE-2026-73165](https://cve.now/CVE-2026-73165.md): Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera (CVSS 8.6)
- [CVE-2026-73164](https://cve.now/CVE-2026-73164.md): Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera (CVSS 8.6)
- [CVE-2026-73163](https://cve.now/CVE-2026-73163.md): Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera (CVSS 8.6)
- [CVE-2026-19535](https://cve.now/CVE-2026-19535.md): Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advan (CVSS 8.6)
- [CVE-2026-79698](https://cve.now/CVE-2026-79698.md): Advantech WISE-6610-NB Node-RED nodered\_lib\_apply command injection (CVSS 9.4)
- [CVE-2026-79697](https://cve.now/CVE-2026-79697.md): Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation\_apply command injection (CVSS 9.4)
- [CVE-2026-43833](https://cve.now/CVE-2026-43833.md): A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution. (CVSS 7.5)
- [CVE-2026-43832](https://cve.now/CVE-2026-43832.md): A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution (CVSS 9.2)
- [CVE-2026-43831](https://cve.now/CVE-2026-43831.md): A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code executi (CVSS 9.2)
- [CVE-2026-43830](https://cve.now/CVE-2026-43830.md): A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands. (CVSS 8.6)
- [CVE-2026-43829](https://cve.now/CVE-2026-43829.md): A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution (CVSS 9.2)
- [CVE-2026-14162](https://cve.now/CVE-2026-14162.md): Advantech｜Hospital Quering Management - Missing Authentication (CVSS 9.3)
- [CVE-2026-14161](https://cve.now/CVE-2026-14161.md): Advantech｜Hospital Queuing Management - Sensitive Data Exposure (CVSS 8.7)
- [CVE-2026-6888](https://cve.now/CVE-2026-6888.md): SQL Injection Vulnerability (CVSS 7.2)
- [CVE-2026-2670](https://cve.now/CVE-2026-2670.md): Advantech WISE-6610-NB Background Management openvpn\_apply os command injection (CVSS 8.6)
- [CVE-2025-52694](https://cve.now/CVE-2025-52694.md): Execution of arbitrary SQL commands (CVSS 10.0)
- [CVE-2025-67653](https://cve.now/CVE-2025-67653.md): Advantech WebAccess/SCADA Path Traversal (CVSS 4.3)
- [CVE-2025-46268](https://cve.now/CVE-2025-46268.md): Advantech WebAccess/SCADA SQL Injection (CVSS 6.3)
- [CVE-2025-14848](https://cve.now/CVE-2025-14848.md): Advantech WebAccess/SCADA Absolute Path Traversal (CVSS 4.3)
- [CVE-2025-14849](https://cve.now/CVE-2025-14849.md): Advantech WebAccess/SCADA Unrestricted Upload of File with Dangerous Type (CVSS 8.8)
- [CVE-2025-14850](https://cve.now/CVE-2025-14850.md): Advantech WebAccess/SCADA Improper Limitation of a Pathname to a Restricted Directory (CVSS 8.1)
- [CVE-2025-14252](https://cve.now/CVE-2025-14252.md): An Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary memory, I/O ports, and (CVSS 8.5)
- [CVE-2025-34256](https://cve.now/CVE-2025-34256.md): Advantech WISE-DeviceOn Server \< 5.4 Hard-coded JWT Key Authentication Bypass (CVSS 10.0)
- [CVE-2025-34265](https://cve.now/CVE-2025-34265.md): Advantech WISE-DeviceOn Server \< 5.4 Authenticated Stored XSS via rule-engines (CVSS 5.1)
- [CVE-2025-34263](https://cve.now/CVE-2025-34263.md): Advantech WISE-DeviceOn Server \< 5.4 Authenticated Stored XSS via plugin-config/dashboards/menus (CVSS 5.1)
- [CVE-2025-34266](https://cve.now/CVE-2025-34266.md): Advantech WISE-DeviceOn Server \< 5.4 Authenticated Stored XSS via plugin-config/addins/menus (CVSS 5.1)
- [CVE-2025-34264](https://cve.now/CVE-2025-34264.md): Advantech WISE-DeviceOn Server \< 5.4 Authenticated Stored XSS via dog/{agentId} (CVSS 5.1)
- [CVE-2025-34262](https://cve.now/CVE-2025-34262.md): Advantech WISE-DeviceOn Server \< 5.4 Authenticated Stored XSS via devices/name/{agent\_id} (CVSS 5.1)
- [CVE-2025-34258](https://cve.now/CVE-2025-34258.md): Advantech WISE-DeviceOn Server \< 5.4 Authenticated Stored XSS via devicemap/plan (CVSS 5.1)
- [CVE-2025-34259](https://cve.now/CVE-2025-34259.md): Advantech WISE-DeviceOn Server \< 5.4 Authenticated Stored XSS via devicemap/building (CVSS 5.1)
- [CVE-2025-34261](https://cve.now/CVE-2025-34261.md): Advantech WISE-DeviceOn Server \< 5.4 Authenticated Stored XSS via devicegroups/ (CVSS 5.1)
- [CVE-2025-34260](https://cve.now/CVE-2025-34260.md): Advantech WISE-DeviceOn Server \< 5.4 Authenticated Stored XSS via action/schedule (CVSS 5.1)
- [CVE-2025-34257](https://cve.now/CVE-2025-34257.md): Advantech WISE-DeviceOn Server \< 5.4 Authenticated Stored XSS via action/defined (CVSS 5.1)
- [CVE-2025-13373](https://cve.now/CVE-2025-13373.md): Advantech iView SQL Injection (CVSS 8.7)
- [CVE-2025-58423](https://cve.now/CVE-2025-58423.md): Advantech DeviceOn/iEdge Path Traversal (CVSS 8.8)
- [CVE-2025-59171](https://cve.now/CVE-2025-59171.md): Advantech DeviceOn/iEdge Path Traversal (CVSS 7.5)
- [CVE-2025-62630](https://cve.now/CVE-2025-62630.md): Advantech DeviceOn/iEdge Path Traversal (CVSS 8.8)
- [CVE-2025-64302](https://cve.now/CVE-2025-64302.md): Advantech DeviceOn/iEdge Cross-site Scripting (CVSS 6.4)
- [CVE-2022-50595](https://cve.now/CVE-2022-50595.md): Advantech iView \< v5.7.04 Build 6425 ztp\_search\_value Parameter SQL Injection RCE (CVSS 9.3)
- [CVE-2022-50591](https://cve.now/CVE-2022-50591.md): Advantech iView \< v5.7.04 Build 6425 ztp\_config\_id Parameter SQL Injection Information Disclosure (CVSS 8.8)
- [CVE-2022-50593](https://cve.now/CVE-2022-50593.md): Advantech iView \< v5.7.04 Build 6425 search\_term Parameter SQL Injection RCE (CVSS 9.3)
- [CVE-2022-50592](https://cve.now/CVE-2022-50592.md): Advantech iView \< v5.7.04 Build 6425 getInventoryReportData Parameter SQL Injection RCE (CVSS 9.3)
- [CVE-2022-50594](https://cve.now/CVE-2022-50594.md): Advantech iView \< v5.7.04 Build 6425 data Parameter SQL Injection Information Disclosure (CVSS 8.8)
- [CVE-2025-34247](https://cve.now/CVE-2025-34247.md): Advantech WebAccess/VPN \< 1.1.5 SQL Injection via NetworksController.addNetworkAction() (CVSS 5.1)
- [CVE-2025-34246](https://cve.now/CVE-2025-34246.md): Advantech WebAccess/VPN \< 1.1.5 SQL Injection via AjaxPrevalidationController.ajaxAction() (CVSS 5.3)
- [CVE-2025-34245](https://cve.now/CVE-2025-34245.md): Advantech WebAccess/VPN \< 1.1.5 SQL Injection via AjaxStandaloneVpnClientsController.ajaxAction() (CVSS 5.3)
- [CVE-2025-34244](https://cve.now/CVE-2025-34244.md): Advantech WebAccess/VPN \< 1.1.5 SQL Injection via AjaxFwRulesController.ajaxDeviceFwRulesAction() (CVSS 5.3)
- [CVE-2025-34243](https://cve.now/CVE-2025-34243.md): Advantech WebAccess/VPN \< 1.1.5 SQL Injection via AjaxFwRulesController.ajaxNetworkFwRulesAction() (CVSS 5.3)
- [CVE-2025-34242](https://cve.now/CVE-2025-34242.md): Advantech WebAccess/VPN \< 1.1.5 SQL Injection via AjaxNetworkController.ajaxAction() (CVSS 8.6)
- [CVE-2025-34241](https://cve.now/CVE-2025-34241.md): Advantech WebAccess/VPN \< 1.1.5 SQL Injection via AjaxDeviceController.ajaxDeviceAction() (CVSS 5.3)
- [CVE-2025-34240](https://cve.now/CVE-2025-34240.md): Advantech WebAccess/VPN \< 1.1.5 SQL Injection via AppManagementController.appUpgradeAction() (CVSS 8.6)
- [CVE-2025-34239](https://cve.now/CVE-2025-34239.md): Advantech WebAccess/VPN \< 1.1.5 Command Injection in AppManagementController.appUpgradeAction() (CVSS 8.6)
- [CVE-2025-34238](https://cve.now/CVE-2025-34238.md): Advantech WebAccess/VPN \< 1.1.5 Path Traversal via AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction() (CVSS 6.9)
- [CVE-2025-34237](https://cve.now/CVE-2025-34237.md): Advantech WebAccess/VPN \< 1.1.5 Stored XSS via StandaloneVpnClientsController.addStandaloneVpnClientAction() (CVSS 6.3)
- [CVE-2025-34236](https://cve.now/CVE-2025-34236.md): Advantech WebAccess/VPN \< 1.1.5 Stored XSS via NetworksController.addNetworkAction() (CVSS 6.2)
- [CVE-2025-53509](https://cve.now/CVE-2025-53509.md): Advantech iView Argument Injection (CVSS 6.5)
- [CVE-2025-52459](https://cve.now/CVE-2025-52459.md): Advantech iView Argument Injection (CVSS 6.5)
- [CVE-2025-53515](https://cve.now/CVE-2025-53515.md): Advantech iView SQL Injection (CVSS 8.8)
- [CVE-2025-52577](https://cve.now/CVE-2025-52577.md): Advantech iView SQL Injection (CVSS 8.8)
- [CVE-2025-53475](https://cve.now/CVE-2025-53475.md): Advantech iView SQL Injection (CVSS 8.8)
- [CVE-2025-46704](https://cve.now/CVE-2025-46704.md): Advantech iView Path Traversal (CVSS 4.3)
- [CVE-2025-48891](https://cve.now/CVE-2025-48891.md): Advantech iView SQL Injection (CVSS 7.6)
- [CVE-2025-41442](https://cve.now/CVE-2025-41442.md): Advantech iView Cross-site Scripting (CVSS 5.4)
- [CVE-2025-53519](https://cve.now/CVE-2025-53519.md): Advantech iView Cross-site Scripting (CVSS 5.4)
- [CVE-2025-53397](https://cve.now/CVE-2025-53397.md): Advantech iView Cross-site Scripting (CVSS 5.4)
- [CVE-2025-48470](https://cve.now/CVE-2025-48470.md): Stored Cross site Scripting (XSS) (CVSS 4.1)
- [CVE-2025-48469](https://cve.now/CVE-2025-48469.md): Unauthenticated Firmware Upload (CVSS 9.6)
- [CVE-2025-48468](https://cve.now/CVE-2025-48468.md): Open JTAG Debug Port (CVSS 6.4)
- [CVE-2025-48467](https://cve.now/CVE-2025-48467.md): Denial of Service via Malformed Modbus Packets (CVSS 6.5)
- [CVE-2025-48466](https://cve.now/CVE-2025-48466.md): Modbus Command Injection without Authentication (CVSS 8.1)
- [CVE-2025-48463](https://cve.now/CVE-2025-48463.md): Unencrypted HTTP Communication (CVSS 3.1)
- [CVE-2025-48462](https://cve.now/CVE-2025-48462.md): Login Session Exhaustion (CVSS 4.2)
- [CVE-2025-48461](https://cve.now/CVE-2025-48461.md): Weak Session Cookie Entropy (CVSS 5.0)
- [CVE-2024-50377](https://cve.now/CVE-2024-50377.md): A CWE-798 "Use of Hard-coded Credentials" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (\<= 1.6.3) (CVSS 6.5)
- [CVE-2024-50376](https://cve.now/CVE-2024-50376.md): A CWE-79 "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" was discovered affecting the following devic (CVSS 7.3)
- [CVE-2024-50375](https://cve.now/CVE-2024-50375.md): A CWE-306 "Missing Authentication for Critical Function" was discovered affecting the following devices manufactured by Advantech: EKI-6333A (CVSS 9.8)
- [CVE-2024-50374](https://cve.now/CVE-2024-50374.md): A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following (CVSS 9.8)
- [CVE-2024-50373](https://cve.now/CVE-2024-50373.md): A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following (CVSS 9.8)
- [CVE-2024-50372](https://cve.now/CVE-2024-50372.md): A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following (CVSS 9.8)
- [CVE-2024-50371](https://cve.now/CVE-2024-50371.md): A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following (CVSS 9.8)
- [CVE-2024-50370](https://cve.now/CVE-2024-50370.md): A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following (CVSS 9.8)
- [CVE-2024-50369](https://cve.now/CVE-2024-50369.md): A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following (CVSS 7.2)
- [CVE-2024-50368](https://cve.now/CVE-2024-50368.md): A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following (CVSS 7.2)
- [CVE-2024-50367](https://cve.now/CVE-2024-50367.md): A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following (CVSS 7.2)
- [CVE-2024-50366](https://cve.now/CVE-2024-50366.md): A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following (CVSS 7.2)
- [CVE-2024-50365](https://cve.now/CVE-2024-50365.md): A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following (CVSS 7.2)
- [CVE-2024-50364](https://cve.now/CVE-2024-50364.md): A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following (CVSS 7.2)
- [CVE-2024-50363](https://cve.now/CVE-2024-50363.md): A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following (CVSS 7.2)
- [CVE-2024-50362](https://cve.now/CVE-2024-50362.md): A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following (CVSS 7.2)
- [CVE-2024-50361](https://cve.now/CVE-2024-50361.md): A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following (CVSS 7.2)
- [CVE-2024-50360](https://cve.now/CVE-2024-50360.md): A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following (CVSS 7.2)
- [CVE-2024-50359](https://cve.now/CVE-2024-50359.md): A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following (CVSS 7.2)
- [CVE-2024-50358](https://cve.now/CVE-2024-50358.md): A CWE-15 "External Control of System or Configuration Setting" was discovered affecting the following devices manufactured by Advantech: EKI (CVSS 7.2)
- [CVE-2023-52335](https://cve.now/CVE-2023-52335.md): Advantech iView ConfigurationServlet SQL Injection Information Disclosure Vulnerability (CVSS 7.5)
- [CVE-2024-39364](https://cve.now/CVE-2024-39364.md): Advantech ADAM-5630 Missing Authentication for Critical Function (CVSS 6.3)
- [CVE-2024-34542](https://cve.now/CVE-2024-34542.md): Advantech ADAM-5630 Weak Encoding for Password (CVSS 5.7)
- [CVE-2024-28948](https://cve.now/CVE-2024-28948.md): Advantech ADAM-5630 Cross-Site Request Forgery (CVSS 8.0)
- [CVE-2024-39275](https://cve.now/CVE-2024-39275.md): Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Information (CVSS 8.0)
- [CVE-2024-38308](https://cve.now/CVE-2024-38308.md): Advantech ADAM-5550 Cross-site Scripting (CVSS 8.8)
- [CVE-2024-37187](https://cve.now/CVE-2024-37187.md): Advantech ADAM-5550 Weak Encoding for Password (CVSS 5.7)
- [CVE-2024-2453](https://cve.now/CVE-2024-2453.md): Advantech WebAccess/SCADA SQL Injection (CVSS 6.4)
- [CVE-2023-5642](https://cve.now/CVE-2023-5642.md): Advantech R-SeeNet Unauthenticated Read/Write (CVSS 9.8)
- [CVE-2023-4215](https://cve.now/CVE-2023-4215.md): Advantech WebAccess Debug Messages Revealing Unnecessary Information (CVSS 6.5)
- [CVE-2023-4203](https://cve.now/CVE-2023-4203.md): Stored Cross-Site Scripting (CVSS 9.0)
- [CVE-2023-4202](https://cve.now/CVE-2023-4202.md): Stored Cross-Site Scripting (CVSS 9.0)
- [CVE-2023-1437](https://cve.now/CVE-2023-1437.md): CVE-2023-1437 (CVSS 9.8)
- [CVE-2023-2611](https://cve.now/CVE-2023-2611.md): Advantech R-SeeNet Use of Hard-coded Credentials (CVSS 9.8)
- [CVE-2023-3256](https://cve.now/CVE-2023-3256.md): Advantech R-SeeNet External Control of File Name or Path (CVSS 8.8)
- [CVE-2023-2866](https://cve.now/CVE-2023-2866.md): Advantech WebAccess Insufficient Type Distinction (CVSS 7.3)
- [CVE-2023-22450](https://cve.now/CVE-2023-22450.md): In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an A (CVSS 7.2)
- [CVE-2023-32540](https://cve.now/CVE-2023-32540.md): In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability, which could allow an attacker to overwrit (CVSS 7.2)
- [CVE-2023-32628](https://cve.now/CVE-2023-32628.md): In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify th (CVSS 7.2)
- [CVE-2023-2573](https://cve.now/CVE-2023-2573.md): Authenticated Command Injection (CVSS 8.8)
- [CVE-2023-2574](https://cve.now/CVE-2023-2574.md): Authenticated Command Injection (CVSS 8.8)
- [CVE-2023-2575](https://cve.now/CVE-2023-2575.md): Authenticated Buffer Overflow (CVSS 8.8)
- [CVE-2022-3387](https://cve.now/CVE-2022-3387.md): Advantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks. (CVSS 6.5)
- [CVE-2022-3386](https://cve.now/CVE-2022-3386.md): Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. (CVSS 9.8)
- [CVE-2022-3385](https://cve.now/CVE-2022-3385.md): Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. (CVSS 9.8)
- [CVE-2022-22987](https://cve.now/CVE-2022-22987.md): Advantech ADAM-3600 (CVSS 9.8)
- [CVE-2021-42703](https://cve.now/CVE-2021-42703.md): AzeoTech DAQFactory (CVSS 5.4)
- [CVE-2021-42706](https://cve.now/CVE-2021-42706.md): AzeoTech DAQFactory (CVSS 7.8)
- [CVE-2021-32951](https://cve.now/CVE-2021-32951.md): Advantech WebAccess/NMS Improper Authentication (CVSS 5.3)
- [CVE-2021-38389](https://cve.now/CVE-2021-38389.md): Advantech WebAccess (CVSS 9.8)
- [CVE-2021-33023](https://cve.now/CVE-2021-33023.md): Advantech WebAccess (CVSS 9.8)
- [CVE-2021-38431](https://cve.now/CVE-2021-38431.md): Advantech WebAccess SCADA (CVSS 4.3)
- [CVE-2019-3975](https://cve.now/CVE-2019-3975.md): Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.1 allows a remote, unauthenticated attacker to execute arbitrary code via a cra (no CVSS)
- [CVE-2019-3941](https://cve.now/CVE-2019-3941.md): Advantech WebAccess 8.3.4 allows unauthenticated, remote attackers to delete arbitrary files via IOCTL 10005 RPC. (no CVSS)
- [CVE-2019-3940](https://cve.now/CVE-2019-3940.md): Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call. (no CVSS)
- [CVE-2019-6554](https://cve.now/CVE-2019-6554.md): Advantech WebAccess/SCADA, Versions 8.3.5 and prior. (no CVSS)
- [CVE-2019-6550](https://cve.now/CVE-2019-6550.md): Advantech WebAccess/SCADA, Versions 8.3.5 and prior. (no CVSS)
- [CVE-2019-6552](https://cve.now/CVE-2019-6552.md): Advantech WebAccess/SCADA, Versions 8.3.5 and prior. (no CVSS)
- [CVE-2018-15707](https://cve.now/CVE-2018-15707.md): Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page. (no CVSS)
- [CVE-2018-15706](https://cve.now/CVE-2018-15706.md): WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to read any file on the filesystem due to a dir (no CVSS)
- [CVE-2018-15705](https://cve.now/CVE-2018-15705.md): WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesyste (no CVSS)
- [CVE-2018-14828](https://cve.now/CVE-2018-14828.md): Advantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which may allow an attacker to access those files (no CVSS)
- [CVE-2018-14820](https://cve.now/CVE-2018-14820.md): Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, which (no CVSS)
- [CVE-2018-14816](https://cve.now/CVE-2018-14816.md): Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities that have been identified, which may allow an (no CVSS)
- [CVE-2018-14806](https://cve.now/CVE-2018-14806.md): Advantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an attacker to execute arbitrary code. (no CVSS)
- [CVE-2018-15704](https://cve.now/CVE-2018-15704.md): Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. (no CVSS)
- [CVE-2018-15703](https://cve.now/CVE-2018-15703.md): Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities. (no CVSS)
- [CVE-2018-8845](https://cve.now/CVE-2018-8845.md): In Advantech WebAccess versions V8.2\_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prio (no CVSS)
- [CVE-2018-8841](https://cve.now/CVE-2018-8841.md): In Advantech WebAccess versions V8.2\_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prio (no CVSS)
- [CVE-2018-7505](https://cve.now/CVE-2018-7505.md): In Advantech WebAccess versions V8.2\_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prio (no CVSS)
- [CVE-2018-7503](https://cve.now/CVE-2018-7503.md): In Advantech WebAccess versions V8.2\_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prio (no CVSS)
- [CVE-2018-7501](https://cve.now/CVE-2018-7501.md): In Advantech WebAccess versions V8.2\_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prio (no CVSS)
- [CVE-2018-7499](https://cve.now/CVE-2018-7499.md): In Advantech WebAccess versions V8.2\_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prio (no CVSS)
- [CVE-2018-7497](https://cve.now/CVE-2018-7497.md): In Advantech WebAccess versions V8.2\_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prio (no CVSS)
- [CVE-2018-7495](https://cve.now/CVE-2018-7495.md): In Advantech WebAccess versions V8.2\_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prio (no CVSS)
- [CVE-2018-10591](https://cve.now/CVE-2018-10591.md): In Advantech WebAccess versions V8.2\_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prio (no CVSS)
- [CVE-2018-10590](https://cve.now/CVE-2018-10590.md): In Advantech WebAccess versions V8.2\_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prio (no CVSS)
- [CVE-2018-10589](https://cve.now/CVE-2018-10589.md): In Advantech WebAccess versions V8.2\_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prio (no CVSS)
- [CVE-2014-2368](https://cve.now/CVE-2014-2368.md): Advantech WebAccess Unsafe ActiveX Control Marked Safe For Scripting (no CVSS)
- [CVE-2014-2367](https://cve.now/CVE-2014-2367.md): Advantech WebAccess Authentication Bypass Issues (no CVSS)
- [CVE-2014-2366](https://cve.now/CVE-2014-2366.md): Advantech WebAccess Cleartext Storage of Sensitive Information in Memory (no CVSS)
- [CVE-2014-2365](https://cve.now/CVE-2014-2365.md): Advantech WebAccess Improper Access Control (no CVSS)
- [CVE-2014-2364](https://cve.now/CVE-2014-2364.md): Advantech WebAccess Stack-Based Buffer Overflow (no CVSS)
- [CVE-2014-0773](https://cve.now/CVE-2014-0773.md): Advantech WebAccess Command Injection (no CVSS)
- [CVE-2014-0772](https://cve.now/CVE-2014-0772.md): Advantech WebAccess File and Directory Information Exposure (no CVSS)
- [CVE-2014-0771](https://cve.now/CVE-2014-0771.md): Advantech WebAccess File and Directory Information Exposure (no CVSS)
- [CVE-2014-0770](https://cve.now/CVE-2014-0770.md): Advantech WebAccess Stack-based Buffer Overflow (no CVSS)
- [CVE-2014-0768](https://cve.now/CVE-2014-0768.md): Advantech WebAccess Stack-based Buffer Overflow (no CVSS)
- [CVE-2014-0767](https://cve.now/CVE-2014-0767.md): Advantech WebAccess Stack-based Buffer Overflow (no CVSS)
- [CVE-2014-0766](https://cve.now/CVE-2014-0766.md): Advantech WebAccess Stack-based Buffer Overflow (no CVSS)
- [CVE-2014-0765](https://cve.now/CVE-2014-0765.md): Advantech WebAccess Stack-based Buffer Overflow (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/advantech
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.