İçeriğe atla
Noroxi

Advantech kayıtları

Advantech üreticisine ait 378 yayımlanmış kayıt. Bunların 0 tanesi sahada sömürüldü (CISA KEV listesinde), 8 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
8 · %2,1
Pre-auth RCE
92
Düzeltme kaydı olan
%3,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

378 kayıt
  • CVE-2016-0854
    62Bu hafta

    Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in

    KritikCVSS 9,8SilahlaştırılmışEPSS %77

    advantech · webaccess14 Oca 2016

  • CVE-2021-21805
    60Bu hafta

    An OS Command Injection vulnerability exists in the ping.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020).

    KritikCVSS 9,8Kavram kanıtıEPSS %69

    advantech · r-seenet5 Ağu 2021

  • CVE-2022-2143
    60Bu hafta

    The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.

    KritikCVSS 9,8SilahlaştırılmışEPSS %62

    advantech · iview22 Tem 2022

  • CVE-2021-22652
    60Bu hafta

    Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attac

    KritikCVSS 9,8SilahlaştırılmışEPSS %36

    advantech · iview11 Şub 2021

  • CVE-2017-14016
    60Bu hafta

    A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817.

    OrtaCVSS 6,3SilahlaştırılmışEPSS %16

    advantech · webaccess6 Kas 2017

  • CVE-2017-16720
    54Planlayın

    A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier.

    KritikCVSS 9,8Kavram kanıtıEPSS %50

    advantech · webaccess5 Oca 2018

  • CVE-2025-52694
    51Planlayın

    Execution of arbitrary SQL commands

    KritikCVSS 9,8Kavram kanıtıEPSS %39

    advantech · iot edge linux docker11 Oca 2026

  • CVE-2014-2364
    48Planlayın

    Advantech WebAccess Stack-Based Buffer Overflow

    YüksekCVSS 7,5SilahlaştırılmışEPSS %61

    advantech · advantech webaccess19 Tem 2014

  • CVE-2011-0340
    47Planlayın

    Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as d

    KritikCVSS 9,3SilahlaştırılmışEPSS %32

    advantech · advantech studio4 May 2011

  • CVE-2016-0857
    47Planlayın

    Multiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vect

    KritikCVSS 9,8İstismar yokEPSS %28

    advantech · webaccess14 Oca 2016

  • CVE-2014-8387
    45Planlayın

    cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitrary commands via shell

    KritikCVSS 9,0Kavram kanıtıEPSS %30

    advantech · eki-6340 firmware20 Kas 2014

  • CVE-2023-5642
    44Planlayın

    Advantech R-SeeNet Unauthenticated Read/Write

    KritikCVSS 9,8İstismar yokEPSS %18

    advantech · r-seenet18 Eki 2023

  • CVE-2016-0856
    44Planlayın

    Multiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vec

    KritikCVSS 9,8İstismar yokEPSS %16

    advantech · webaccess14 Oca 2016

  • CVE-2022-2139
    44Planlayın

    The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary co

    KritikCVSS 9,8İstismar yokEPSS %16

    advantech · iview22 Tem 2022

  • CVE-2018-6911
    43Planlayın

    The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a sing

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    advantech · webaccess13 Şub 2018

  • CVE-2021-22658
    43Planlayın

    Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Adm

    KritikCVSS 9,8İstismar yokEPSS %12

    advantech · iview11 Şub 2021

  • CVE-2014-9208
    43Planlayın

    Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attackers to execute arbitra

    KritikCVSS 10,0Kavram kanıtıEPSS %9

    advantech · webaccess11 Eyl 2015

  • CVE-2011-0488
    43Planlayın

    Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and I

    KritikCVSS 10,0İstismar yokEPSS %8

    advantech · advantech studio18 Oca 2011

  • CVE-2021-21801
    42Planlayın

    This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web applications.

    OrtaCVSS 6,1Kavram kanıtıEPSS %58

    advantech · r-seenet16 Tem 2021

  • CVE-2021-38408
    42Planlayın

    A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper validation of the leng

    KritikCVSS 9,8İstismar yokEPSS %11

    advantech · webaccess9 Eyl 2021

  • CVE-2019-10993
    42Planlayın

    In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference vulnerabilities may allow a remote attacker to execute a

    KritikCVSS 9,8İstismar yokEPSS %10

    advantech · webaccess28 Haz 2019

  • CVE-2021-38389
    42Planlayın

    Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute

    KritikCVSS 9,8İstismar yokEPSS %10

    advantech · webaccess18 Eki 2021

  • CVE-2020-12002
    42Planlayın

    Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0.

    KritikCVSS 9,8İstismar yokEPSS %9

    advantech · webaccess8 May 2020

  • CVE-2019-10991
    42Planlayın

    In WebAccess/SCADA, Versions 8.3.5 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation

    KritikCVSS 9,8İstismar yokEPSS %8

    advantech · webaccess28 Haz 2019

  • CVE-2019-10989
    42Planlayın

    In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack of proper validation o

    KritikCVSS 9,8İstismar yokEPSS %8

    advantech · webaccess28 Haz 2019