WE
Product
Webaccess
by Advantech · last CVE Oct 17, 2023
103
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 41High 46Medium 13Low 0
Watch

Add Webaccess to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-38389
9.8
10%
Oct 18
Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code
Affected: through 9.0.2
CVE-2021-33023
9.8
2%
Oct 18
Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code
Affected: through 9.0.2
CVE-2021-38408
9.8
12%
Sep 9
A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper validation of the length of user-supplied data may allow…
Affected: through 9.02
CVE-2020-12019
9.8
2%
Jun 15
WebAccess Node Version 8.4.4 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code
Affected: through 8.4.4
CVE-2020-12022
9.8
2%
May 8
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0
Affected: through 8.4.4; 9.0.0
CVE-2020-12006
9.8
4%
May 8
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0
Affected: through 8.4.4; 9.0.0
CVE-2020-12002
9.8
9%
May 8
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0
Affected: through 8.4.4; 9.0.0
CVE-2020-10638
9.8
7%
May 8
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0
Affected: through 8.4.4; 9.0.0
CVE-2019-3951
9.8
4%
Dec 12
Advantech WebAccess before 8.4.3 allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service (memory corruption) due to a stack-based buffer…
Affected: before 8.4.3
CVE-2019-13558
9.8
3%
Sep 18
In WebAccess versions 8.4.1 and prior, an exploit executed over the network may cause improper control of generation of code, which may allow remote code execution, data…
Affected: through 8.4.1
CVE-2019-13550
9.8
3%
Sep 18
In WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an attacker to disclose sensitive information, cause improper control of generation of…
Affected: through 8.4.1
CVE-2019-3975
9.8
5%
Sep 10
Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.1 allows a remote, unauthenticated attacker to execute arbitrary code via a crafted IOCTL 70603 RPC message
Affected: 8.4.1
CVE-2019-10993
9.8
11%
Jun 28
In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference vulnerabilities may allow a remote attacker to execute arbitrary code
Affected: through 8.3.5
CVE-2019-10991
9.8
9%
Jun 28
In WebAccess/SCADA, Versions 8.3.5 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data
Affected: through 8.3.5
CVE-2019-10989
9.8
9%
Jun 28
In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data
Affected: through 8.3.5
CVE-2019-3954
9.8
4%
Jun 19
Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote, unauthenticated attacker to execute arbitrary code by sending a crafted IOCTL 81024 RPC call
Affected: 8.4.0
CVE-2019-3953
9.8
4%
Jun 18
Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote, unauthenticated attacker to execute arbitrary code by sending a crafted IOCTL 10012 RPC call
Affected: 8.4.0
CVE-2019-3940
9.8
4%
Apr 9
Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call
Affected: 8.3.4
CVE-2019-6552
9.8
3%
Apr 5
Advantech WebAccess/SCADA, Versions 8.3.5 and prior
Affected: through 8.3.5
CVE-2019-6550
9.8
6%
Apr 5
Advantech WebAccess/SCADA, Versions 8.3.5 and prior
Affected: through 8.3.5
CVE-2018-14816
9.8
4%
Oct 23
Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities that have been identified, which may allow an attacker to execute arbitrary code
Affected: through 8.3.1
CVE-2018-14806
9.8
5%
Oct 23
Advantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an attacker to execute arbitrary code
Affected: through 8.3.1
CVE-2018-8845
9.8
6%
May 15
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…
Affected: through 8.2_20170817; through 8.3.0
CVE-2018-7505
9.8
3%
May 15
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…
Affected: through 8.2_20170817; through 8.3.0
CVE-2018-7499
9.8
4%
May 15
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…
Affected: through 8.2_20170817; through 8.3.0
CVE-2018-7497
9.8
3%
May 15
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…
Affected: through 8.2_20170817; through 8.3.0
CVE-2018-10589
9.8
4%
May 15
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…
Affected: through 8.2_20170817; through 8.3.0
CVE-2018-6911
9.8
13%
Feb 13
The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a single argument (aka the command parameter)
Affected: 8.3.0
CVE-2017-16724
9.8
3%
Jan 5
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3
Affected: before 8.3
CVE-2017-16720
9.8
50%
Jan 5
A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier
Affected: through 8.3.2
CVE-2017-16716
9.8
6%
Jan 5
A SQL Injection issue was discovered in WebAccess versions prior to 8.3
Affected: before 8.3
CVE-2017-12708
9.8
3%
Aug 30
An Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered in Advantech WebAccess versions prior to V8.2_20170817
Affected: through 8.2
CVE-2017-12706
9.8
3%
Aug 30
A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817
Affected: through 8.2
CVE-2017-12698
9.8
5%
Aug 30
An Improper Authentication issue was discovered in Advantech WebAccess versions prior to V8.2_20170817
Affected: through 8.2
CVE-2017-5154
9.8
4%
Feb 13
An issue was discovered in Advantech WebAccess Version 8.1
Affected: 8.1
CVE-2016-0859
9.8
8%
Jan 15
Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer…
Affected: through 8.0
CVE-2016-0857
9.8
28%
Jan 15
Multiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors
Affected: through 8.0
CVE-2016-0856
9.8
17%
Jan 15
Multiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors
Affected: through 8.0
CVE-2016-0854
9.8
77%
Jan 15
Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows…
Affected: through 8.0
CVE-2019-10985
9.1
3%
Jun 28
In WebAccess/SCADA, Versions 8.3.5 and prior, a path traversal vulnerability is caused by a lack of proper validation of a user-supplied path prior to use in file operations
Affected: through 8.3.5
CVE-2017-5152
9.1
4%
Feb 13
An issue was discovered in Advantech WebAccess Version 8.1
Affected: 8.1
CVE-2020-12026
8.8
2%
May 8
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0
Affected: through 8.4.4; 9.0.0
CVE-2020-10607
8.8
2%
Mar 27
In Advantech WebAccess, Versions 8.4.2 and prior
Affected: through 8.4.2
CVE-2019-13556
8.8
2%
Sep 18
In WebAccess versions 8.4.1 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data
Affected: through 8.4.1
CVE-2019-13552
8.8
3%
Sep 18
In WebAccess versions 8.4.1 and prior, multiple command injection vulnerabilities are caused by a lack of proper validation of user-supplied data and may allow arbitrary file…
Affected: through 8.4.1
CVE-2019-10987
8.8
6%
Jun 28
In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are caused by a lack of proper validation of the length of user-supplied data
Affected: through 8.3.5
CVE-2018-15704
8.8
22%
Oct 22
Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability
Affected: through 8.3.2
CVE-2017-12704
8.8
3%
Aug 30
A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817
Affected: through 8.2
CVE-2017-12702
8.8
2%
Aug 30
An Externally Controlled Format String issue was discovered in Advantech WebAccess versions prior to V8.2_20170817
Affected: through 8.2
CVE-2015-3946
8.8
1%
Jan 15
Cross-site request forgery (CSRF) vulnerability in Advantech WebAccess before 8.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors
Affected: through 8.0
Page 1 of 3 · 103 total