Advantech vulnerabilities
202 CVEs and advisories name Advantech as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-34236Advantech WebAccess/VPN < 1.1.5 Stored XSS via NetworksController.addNetworkAction()
- CVE-2025-53509Advantech iView Argument Injection
- CVE-2025-52459Advantech iView Argument Injection
- CVE-2025-53515Advantech iView SQL Injection
- CVE-2025-52577Advantech iView SQL Injection
- CVE-2025-53475Advantech iView SQL Injection
- CVE-2025-46704Advantech iView Path Traversal
- CVE-2025-48891Advantech iView SQL Injection
- CVE-2025-41442Advantech iView Cross-site Scripting
- CVE-2025-53519Advantech iView Cross-site Scripting
- CVE-2025-53397Advantech iView Cross-site Scripting
- CVE-2025-48470Stored Cross site Scripting (XSS)
- CVE-2025-48469Unauthenticated Firmware Upload
- CVE-2025-48468Open JTAG Debug Port
- CVE-2025-48467Denial of Service via Malformed Modbus Packets
- CVE-2025-48466Modbus Command Injection without Authentication
- CVE-2025-48463Unencrypted HTTP Communication
- CVE-2025-48462Login Session Exhaustion
- CVE-2025-48461Weak Session Cookie Entropy
- CVE-2024-50377A CWE-798 "Use of Hard-coded Credentials" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3)
- CVE-2024-50376A CWE-79 "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" was discovered affecting the following devic
- CVE-2024-50375A CWE-306 "Missing Authentication for Critical Function" was discovered affecting the following devices manufactured by Advantech: EKI-6333A
- CVE-2024-50374A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following
- CVE-2024-50373A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following
- CVE-2024-50372A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following
- CVE-2024-50371A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following
- CVE-2024-50370A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following
- CVE-2024-50369A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following
- CVE-2024-50368A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following
- CVE-2024-50367A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following