WE
Product
Webaccess/nms
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 8Medium 3Low 0
Watch
Add Webaccess/nms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10631 | 9.8 | Apr 9 | An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's (versions prior to 3.0.2) control Affected: before 3.0.2 |
| CVE-2020-10625 | 9.8 | Apr 9 | WebAccess/NMS (versions prior to 3.0.2) allows an unauthenticated remote user to create a new admin account Affected: before 3.0.2 |
| CVE-2020-10621 | 9.8 | Apr 9 | Multiple issues exist that allow files to be uploaded and executed on the WebAccess/NMS (versions prior to 3.0.2) Affected: before 3.0.2 |
| CVE-2018-8845 | 9.8 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 2.0.3 |
| CVE-2018-7505 | 9.8 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 2.0.3 |
| CVE-2018-7499 | 9.8 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 2.0.3 |
| CVE-2018-7497 | 9.8 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 2.0.3 |
| CVE-2018-10589 | 9.8 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 2.0.3 |
| CVE-2020-10619 | 9.1 | Apr 9 | An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2) control Affected: before 3.0.2 |
| CVE-2020-10603 | 8.8 | Apr 9 | WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely Affected: before 3.0.2 |
| CVE-2018-8841 | 7.8 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 2.0.3 |
| CVE-2020-10629 | 7.5 | Apr 9 | WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input Affected: before 3.0.2 |
| CVE-2020-10617 | 7.5 | Apr 9 | There are multiple ways an unauthenticated attacker could perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access to sensitive information Affected: before 3.0.2 |
| CVE-2018-7503 | 7.5 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 2.0.3 |
| CVE-2018-7501 | 7.5 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 2.0.3 |
| CVE-2018-7495 | 7.5 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 2.0.3 |
| CVE-2018-10590 | 7.5 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 2.0.3 |
| CVE-2020-10623 | 6.5 | Apr 9 | Multiple vulnerabilities could allow an attacker with low privileges to perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access to sensitive information Affected: before 3.0.2 |
| CVE-2018-10591 | 6.1 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 2.0.3 |
| CVE-2021-32951 | 5.3 | Oct 27 | WebAccess/NMS (Versions prior to v3.0.3_Build6299) has an improper authentication vulnerability, which may allow unauthorized users to view resources monitored and controlled by… Affected: through 3.0.3 |
Showing 20