Read the docs

Advantech

Records434All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical118CVSS 9.0–10.0
CVSS high195CVSS 7.0–8.9

Exploited now

Advantech records in CISA KEV

No Advantech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Webaccess 103 records HIGH Advantech Webaccess 44 records HIGH R-seenet 40 records HIGH Iview 37 records HIGH Webaccess/scada 29 records MEDIUM Eki-6333ac-1gpo Firmware 20 records MEDIUM Eki-6333ac-2g Firmware 20 records MEDIUM Eki-6333ac-2gd Firmware 20 records MEDIUM

Records

12 records in Webaccess/hmi Designer · all components

TI-2021-12612 CVE-2021-33004 · GHSA-q569-xrrr-6gvr

Memory corruption in WebAccess HMI Designer

Priority LOW 36

The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0095 Published 2021-06-24 No fix listed CWE-119
TI-2021-12610 CVE-2021-33002 · GHSA-rv7f-8vhf-g8q8

Out-of-bounds write in WebAccess HMI Designer

Priority LOW 36

Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0097 Published 2021-06-24 No fix listed CWE-787
TI-2021-12608 CVE-2021-33000 · GHSA-v5mq-7f48-6rhv

Heap-based buffer overflow in WebAccess HMI Designer

Priority LOW 36

Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01041 Published 2021-06-24 No fix listed CWE-122
Open these records in search →