HighCVSS 8.6
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
Vendor
advantech vulnerabilities
434 published CVES affecting advantech, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 434
- Critical
- 100
- High
- 204
- Medium
- 128
- Low
- 2
- Unscored
- 0
- CISA KEV
- 0
Products
- webaccess 118
- advantech webaccess 53
- R-SeeNet 40
- iView 39
- WebAccess/SCADA 36
- ADAM-3600 31
- EKI-6333AC-1GPO 20
- eki-6333ac-1gpo firmware 20
- EKI-6333AC-2G 20
- eki-6333ac-2g firmware 20
- EKI-6333AC-2GD 20
- eki-6333ac-2gd firmware 20
- webaccessnms 20
- EKI-1242EIMS 15
- EKI-1242IEIMS 15
- webaccess scada 12
- WebAccess/VPN 12
- webaccesshmi designer 12
- webaccess dashboard 11
- WISE-DeviceOn Server 11
- Advantech Wireless Sensing and Equipment (WISE) 8
- wise-4010lan firmware 8
- wise-4050lan firmware 8
- wise-4060lan firmware 8
- webaccess hmi designer 6
- DeviceOn/iEdge 5
- EKI-1521 5
- eki-1521 firmware 5
- EKI-1522 5
- eki-1522 firmware 5
Latest advantech CVEs
Newest publication first · page 1 of 18
-
-
HighCVSS 8.6
A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.
-
HighCVSS 8.6
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.
-
HighCVSS 7.5
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
-
MediumCVSS 6.3
A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.
-
HighCVSS 8.2
A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.
-
HighCVSS 8.2
A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
-
HighCVSS 8.2
A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
-
HighCVSS 8.6
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.
-
MediumCVSS 6.9
A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.
-
MediumCVSS 6.9
A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.
-
HighCVSS 8.2
A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.
-
HighCVSS 8.6
A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.
-
CriticalCVSS 9.2
A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
-
CriticalCVSS 9.3
A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.
-
MediumCVSS 6.9
An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.
-
MediumCVSS 6.9
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.
-
MediumCVSS 6.9
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.
-
MediumCVSS 6.9
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.
-
HighCVSS 8.7
A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.
-
CriticalCVSS 9.2
A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.
-
HighCVSS 7.5
A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.
-
CriticalCVSS 9.3
A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.
-
HighCVSS 8.6
A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.
-
HighCVSS 7.5
A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.