Skip to content
Noroxi

Advantech records

378 published records for vendor advantech.

Researcher profile

Entered KEV
0 · 0%
Weaponized
8 · 2.1%
Pre-auth RCE
92
With a fix record
3.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

378 records
  • CVE-2016-0854
    62This week

    Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in

    CriticalCVSS 9.8WeaponizedEPSS 77%

    advantech · webaccessJan 14, 2016

  • CVE-2021-21805
    60This week

    An OS Command Injection vulnerability exists in the ping.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020).

    CriticalCVSS 9.8Proof of conceptEPSS 70%

    advantech · r-seenetAug 5, 2021

  • CVE-2022-2143
    57Plan

    The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.

    CriticalCVSS 9.8WeaponizedEPSS 59%

    advantech · iviewJul 22, 2022

  • CVE-2017-16720
    54Plan

    A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier.

    CriticalCVSS 9.8Proof of conceptEPSS 50%

    advantech · webaccessJan 5, 2018

  • CVE-2025-52694
    51Plan

    Execution of arbitrary SQL commands

    CriticalCVSS 9.8Proof of conceptEPSS 40%

    advantech · iot edge linux dockerJan 11, 2026

  • CVE-2021-22652
    50Plan

    Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attac

    CriticalCVSS 9.8WeaponizedEPSS 37%

    advantech · iviewFeb 11, 2021

  • CVE-2014-2364
    48Plan

    Advantech WebAccess Stack-Based Buffer Overflow

    HighCVSS 7.5WeaponizedEPSS 61%

    advantech · advantech webaccessJul 19, 2014

  • CVE-2011-0340
    47Plan

    Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as d

    CriticalCVSS 9.3WeaponizedEPSS 32%

    advantech · advantech studioMay 4, 2011

  • CVE-2016-0857
    47Plan

    Multiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vect

    CriticalCVSS 9.8No exploitEPSS 28%

    advantech · webaccessJan 14, 2016

  • CVE-2014-8387
    45Plan

    cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitrary commands via shell

    CriticalCVSS 9.0Proof of conceptEPSS 31%

    advantech · eki-6340 firmwareNov 20, 2014

  • CVE-2016-0856
    44Plan

    Multiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vec

    CriticalCVSS 9.8No exploitEPSS 17%

    advantech · webaccessJan 14, 2016

  • CVE-2023-5642
    44Plan

    Advantech R-SeeNet Unauthenticated Read/Write

    CriticalCVSS 9.8No exploitEPSS 17%

    advantech · r-seenetOct 18, 2023

  • CVE-2022-2139
    44Plan

    The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary co

    CriticalCVSS 9.8No exploitEPSS 16%

    advantech · iviewJul 22, 2022

  • CVE-2021-21801
    43Plan

    This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web applications.

    MediumCVSS 6.1Proof of conceptEPSS 63%

    advantech · r-seenetJul 16, 2021

  • CVE-2018-6911
    43Plan

    The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a sing

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    advantech · webaccessFeb 13, 2018

  • CVE-2021-22658
    43Plan

    Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Adm

    CriticalCVSS 9.8No exploitEPSS 13%

    advantech · iviewFeb 11, 2021

  • CVE-2014-9208
    43Plan

    Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attackers to execute arbitra

    CriticalCVSS 10.0Proof of conceptEPSS 9%

    advantech · webaccessSep 11, 2015

  • CVE-2011-0488
    43Plan

    Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and I

    CriticalCVSS 10.0No exploitEPSS 9%

    advantech · advantech studioJan 18, 2011

  • CVE-2021-38408
    42Plan

    A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper validation of the leng

    CriticalCVSS 9.8No exploitEPSS 12%

    advantech · webaccessSep 9, 2021

  • CVE-2019-10993
    42Plan

    In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference vulnerabilities may allow a remote attacker to execute a

    CriticalCVSS 9.8No exploitEPSS 11%

    advantech · webaccessJun 28, 2019

  • CVE-2021-38389
    42Plan

    Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute

    CriticalCVSS 9.8No exploitEPSS 10%

    advantech · webaccessOct 18, 2021

  • CVE-2020-12002
    42Plan

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0.

    CriticalCVSS 9.8No exploitEPSS 9%

    advantech · webaccessMay 8, 2020

  • CVE-2019-10991
    42Plan

    In WebAccess/SCADA, Versions 8.3.5 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation

    CriticalCVSS 9.8No exploitEPSS 9%

    advantech · webaccessJun 28, 2019

  • CVE-2019-10989
    42Plan

    In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack of proper validation o

    CriticalCVSS 9.8No exploitEPSS 9%

    advantech · webaccessJun 28, 2019

  • CVE-2012-0242
    42Plan

    Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via format string s

    CriticalCVSS 10.0Proof of conceptEPSS 7%

    advantech · advantech webaccessFeb 21, 2012