Advantech vulnerabilities
202 CVEs and advisories name Advantech as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-50366A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following
- CVE-2024-50365A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following
- CVE-2024-50364A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following
- CVE-2024-50363A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following
- CVE-2024-50362A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following
- CVE-2024-50361A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following
- CVE-2024-50360A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following
- CVE-2024-50359A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following
- CVE-2024-50358A CWE-15 "External Control of System or Configuration Setting" was discovered affecting the following devices manufactured by Advantech: EKI
- CVE-2023-52335Advantech iView ConfigurationServlet SQL Injection Information Disclosure Vulnerability
- CVE-2024-39364Advantech ADAM-5630 Missing Authentication for Critical Function
- CVE-2024-34542Advantech ADAM-5630 Weak Encoding for Password
- CVE-2024-28948Advantech ADAM-5630 Cross-Site Request Forgery
- CVE-2024-39275Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Information
- CVE-2024-38308Advantech ADAM-5550 Cross-site Scripting
- CVE-2024-37187Advantech ADAM-5550 Weak Encoding for Password
- CVE-2024-2453Advantech WebAccess/SCADA SQL Injection
- CVE-2023-5642Advantech R-SeeNet Unauthenticated Read/Write
- CVE-2023-4215Advantech WebAccess Debug Messages Revealing Unnecessary Information
- CVE-2023-4203Stored Cross-Site Scripting
- CVE-2023-4202Stored Cross-Site Scripting
- CVE-2023-1437CVE-2023-1437
- CVE-2023-2611Advantech R-SeeNet Use of Hard-coded Credentials
- CVE-2023-3256Advantech R-SeeNet External Control of File Name or Path
- CVE-2023-2866Advantech WebAccess Insufficient Type Distinction
- CVE-2023-22450 In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an A
- CVE-2023-32540 In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability, which could allow an attacker to overwrit
- CVE-2023-32628 In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify th
- CVE-2023-2573Authenticated Command Injection
- CVE-2023-2574Authenticated Command Injection