Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Vendor: Advantech Component: Webaccess Scada Clear all filters
TI-2021-16034 CVE-2021-38431 · GHSA-pvmh-mh74-89p6

Missing authorization in Advantech WebAccess SCADA

Priority LOW 21

An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00698 Published 2021-10-15 No fix listed CWE-862
TI-2018-07480 CVE-2018-10591 · GHSA-qgcv-4qmw-5vxg

Origin validation error in Advantech WebAccess

Priority LOW 28

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and pri…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00616 Published 2018-05-15 No fix listed CWE-346
TI-2018-07478 CVE-2018-10589 · GHSA-92hq-qvmc-rcj7

Path traversal in Advantech WebAccess

Priority MEDIUM 49

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and pri…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03941 Published 2018-05-15 No fix listed CWE-22
TI-2018-06387 CVE-2018-8845 · GHSA-r2p8-8cx3-42qq

Heap-based buffer overflow in Advantech WebAccess

Priority MEDIUM 51

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and pri…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05569 Published 2018-05-15 No fix listed CWE-122
TI-2018-06383 CVE-2018-8841 · GHSA-5rwg-3977-9qwq

Improper privilege management in Advantech WebAccess

Priority LOW 34

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and pri…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.0035 Published 2018-05-15 No fix listed CWE-269
TI-2018-05414 CVE-2018-7505 · GHSA-mxm8-g5h2-w69j

Access control flaw in Advantech WebAccess

Priority MEDIUM 47

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and pri…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02791 Published 2018-05-15 No fix listed CWE-264
TI-2018-05412 CVE-2018-7503 · GHSA-wp7j-7rh2-gfqr

Path traversal in Advantech WebAccess

Priority LOW 38

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and pri…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0245 Published 2018-05-15 No fix listed CWE-22
TI-2018-05410 CVE-2018-7501 · GHSA-j574-68wv-r2pg

SQL injection in Advantech WebAccess

Priority LOW 36

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and pri…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01586 Published 2018-05-15 No fix listed CWE-89
TI-2018-05408 CVE-2018-7499 · GHSA-whww-465v-hrfr

Stack-based buffer overflow in Advantech WebAccess

Priority MEDIUM 48

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and pri…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03719 Published 2018-05-15 No fix listed CWE-121
TI-2018-05406 CVE-2018-7497 · GHSA-f2h7-p6gx-hh2p

NULL pointer dereference in Advantech WebAccess

Priority MEDIUM 47

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and pri…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02791 Published 2018-05-15 No fix listed CWE-822
TI-2018-05404 CVE-2018-7495 · GHSA-g8c4-9gqr-q3cf

Path traversal in Advantech WebAccess

Priority LOW 37

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and pri…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02117 Published 2018-05-15 No fix listed CWE-73