Login Request a demo
AD
Vendor
Advantech
88 products with CVEs on record
599
CVEs
0
On KEV
25
New 30D
Products
AD
ADAM-3600
Advantech
9.8
30 CVEs0 on KEV25 new
WE
Webaccess
Advantech
9.8
103 CVEs0 on KEV0 new
AW
Advantech Webaccess
Advantech
–
44 CVEs0 on KEV0 new
WE
WebAccess/SCADA
Advantech
9.8
42 CVEs0 on KEV0 new
RS
R-SeeNet
Advantech
9.8
40 CVEs0 on KEV0 new
IV
Iview
Advantech
9.8
37 CVEs0 on KEV0 new
EF
Eki-6333ac-1gpo Firmware
Advantech
9.8
20 CVEs0 on KEV0 new
EF
Eki-6333ac-2g Firmware
Advantech
9.8
20 CVEs0 on KEV0 new
EF
Eki-6333ac-2gd Firmware
Advantech
9.8
20 CVEs0 on KEV0 new
WE
Webaccess/nms
Advantech
9.8
20 CVEs0 on KEV0 new
WH
Webaccess Hmi Designer
Advantech
8.8
18 CVEs0 on KEV0 new
EK
EKI-1242EIMS
Advantech
9.3
15 CVEs0 on KEV0 new
EK
EKI-1242IEIMS
Advantech
9.3
15 CVEs0 on KEV0 new
WE
Webaccess/vpn
Advantech
7.2
12 CVEs0 on KEV0 new
WD
Webaccess Dashboard
Advantech
9.8
11 CVEs0 on KEV0 new
WS
Wise-deviceon Server
Advantech
9.8
11 CVEs0 on KEV0 new
WF
Wise-4010lan Firmware
Advantech
9.6
8 CVEs0 on KEV0 new
WF
Wise-4050lan Firmware
Advantech
9.6
8 CVEs0 on KEV0 new
WF
Wise-4060lan Firmware
Advantech
9.6
8 CVEs0 on KEV0 new
DE
Deviceon/iedge
Advantech
9.8
5 CVEs0 on KEV0 new
EF
Eki-1521 Firmware
Advantech
8.8
5 CVEs0 on KEV0 new
EF
Eki-1522 Firmware
Advantech
8.8
5 CVEs0 on KEV0 new
EF
Eki-1524 Firmware
Advantech
8.8
5 CVEs0 on KEV0 new
WI
Wise-paas/rmm
Advantech
9.8
5 CVEs0 on KEV0 new
AF
Adam-5630 Firmware
Advantech
8.8
3 CVEs0 on KEV0 new
AS
Advantech Studio
Advantech
–
3 CVEs0 on KEV0 new
SR
Spectre RT Ert351 Firmware
Advantech
9.8
3 CVEs0 on KEV0 new
SU
Susiaccess
Advantech
7.8
3 CVEs0 on KEV0 new
A5
Adam 5550-firmware
Advantech
6.1
2 CVEs0 on KEV0 new
ES
Eki-1321 Series Firmware
Advantech
9.8
2 CVEs0 on KEV0 new
ES
Eki-1322 Series Firmware
Advantech
9.8
2 CVEs0 on KEV0 new
IE
IoT Edge Linux docker
Advantech
9.8
2 CVEs0 on KEV0 new
IE
IoT Edge Windows
Advantech
9.8
2 CVEs0 on KEV0 new
IG
IoTSuite Growth Linux docker
Advantech
9.8
2 CVEs0 on KEV0 new
IS
IoTSuite Starter Linux docker
Advantech
9.8
2 CVEs0 on KEV0 new
WI
WISE-6610-CB
Advantech
9.9
2 CVEs0 on KEV0 new
WI
WISE-6610-EB
Advantech
9.9
2 CVEs0 on KEV0 new
WI
WISE-6610-EL-CB
Advantech
9.9
2 CVEs0 on KEV0 new
WI
WISE-6610-EL-EB
Advantech
9.9
2 CVEs0 on KEV0 new
WI
WISE-6610-EL-JB
Advantech
9.9
2 CVEs0 on KEV0 new
WI
WISE-6610-EL-NB
Advantech
9.9
2 CVEs0 on KEV0 new
WI
WISE-6610-EL-TB
Advantech
9.9
2 CVEs0 on KEV0 new
WI
WISE-6610-JB
Advantech
9.9
2 CVEs0 on KEV0 new
WI
WISE-6610-NB
Advantech
9.9
2 CVEs0 on KEV0 new
WI
WISE-6610-TB
Advantech
9.9
2 CVEs0 on KEV0 new
WI
WISE-6610P-DEA
Advantech
9.9
2 CVEs0 on KEV0 new
WI
WISE-6610P-DNA
Advantech
9.9
2 CVEs0 on KEV0 new
WI
WISE-6610P-DTA
Advantech
9.9
2 CVEs0 on KEV0 new
AF
Adam-3600 Firmware
Advantech
9.8
1 CVEs0 on KEV0 new
AD
Adam-6015
Advantech
–
1 CVEs0 on KEV0 new
AD
Adam-6017
Advantech
–
1 CVEs0 on KEV0 new
AD
Adam-6018
Advantech
–
1 CVEs0 on KEV0 new
AD
Adam-6022
Advantech
–
1 CVEs0 on KEV0 new
AD
Adam-6024
Advantech
–
1 CVEs0 on KEV0 new
AD
Adam-6050
Advantech
–
1 CVEs0 on KEV0 new
AD
Adam-6050w
Advantech
–
1 CVEs0 on KEV0 new
AD
Adam-6051
Advantech
–
1 CVEs0 on KEV0 new
AD
Adam-6051w
Advantech
–
1 CVEs0 on KEV0 new
AD
Adam-6052
Advantech
–
1 CVEs0 on KEV0 new
AD
Adam-6060
Advantech
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-43858
AD
ADAM-3600
Advantech
8.6
1%
Oct 20A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution
CVE-2026-43857
AD
ADAM-3600
Advantech
8.6
1%
Oct 20A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service
CVE-2026-43856
AD
ADAM-3600
Advantech
8.6
1%
Oct 20A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer…
CVE-2026-43855
AD
ADAM-3600
Advantech
7.5
0%
Oct 20A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution
CVE-2026-43854
AD
ADAM-3600
Advantech
6.3
0%
Oct 20A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices
CVE-2026-43853
AD
ADAM-3600
Advantech
8.2
0%
Oct 20A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash
CVE-2026-43852
AD
ADAM-3600
Advantech
8.2
0%
Oct 20A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system
CVE-2026-43851
AD
ADAM-3600
Advantech
8.2
0%
Oct 20A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system
CVE-2026-43850
AD
ADAM-3600
Advantech
8.6
2%
Oct 20A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system
CVE-2026-43849
AD
ADAM-3600
Advantech
6.9
0%
Oct 20A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data
CVE-2026-43848
AD
ADAM-3600
Advantech
6.9
0%
Oct 20A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service
CVE-2026-43847
AD
ADAM-3600
Advantech
8.2
0%
Oct 20A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is…
CVE-2026-43846
AD
ADAM-3600
Advantech
8.6
0%
Oct 20A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution
CVE-2026-43845
AD
ADAM-3600
Advantech
9.2
0%
Oct 20A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism
CVE-2026-43844
AD
ADAM-3600
Advantech
9.3
0%
Oct 20A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism
CVE-2026-43843
AD
ADAM-3600
Advantech
6.9
0%
Oct 20An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service
CVE-2026-43842
AD
ADAM-3600
Advantech
6.9
0%
Oct 20A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set…
CVE-2026-43841
AD
ADAM-3600
Advantech
6.9
0%
Oct 20A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function
CVE-2026-43840
AD
ADAM-3600
Advantech
6.9
0%
Oct 20A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function
CVE-2026-43839
AD
ADAM-3600
Advantech
8.7
0%
Oct 20A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service
CVE-2026-43838
AD
ADAM-3600
Advantech
9.2
0%
Oct 20A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution
CVE-2026-43837
AD
ADAM-3600
Advantech
7.5
0%
Oct 20A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution
CVE-2026-43836
AD
ADAM-3600
Advantech
9.3
1%
Oct 20A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges
CVE-2026-43835
AD
ADAM-3600
Advantech
8.6
0%
Oct 20A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device…
CVE-2026-43834
AD
ADAM-3600
Advantech
7.5
0%
Oct 20A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution
CVE-2026-73177
EK
EKI-1242IEIMS
Advantech
8.6
0%
Sep 16Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware…
CVE-2026-73176
EK
EKI-1242EIMS
Advantech
8.6
1%
Sep 16Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface…
CVE-2026-73175
EK
EKI-1242IEIMS
Advantech
7.1
0%
Sep 16Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-1242EIMS in firmware version V1.06.01…
CVE-2026-73174
EK
EKI-1242IEIMS
Advantech
8.7
0%
Sep 16Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware…
CVE-2026-73173
EK
EKI-1242IEIMS
Advantech
8.8
1%
Sep 16Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware…
CVE-2026-73172
EK
EKI-1242EIMS
Advantech
9.3
2%
Sep 16Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the edgserver management…
CVE-2026-73171
EK
EKI-1242EIMS
Advantech
8.6
1%
Sep 16Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmware version V1.06.01…
CVE-2026-73170
EK
EKI-1242EIMS
Advantech
8.6
1%
Sep 16Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in…
CVE-2026-73169
EK
EKI-1242IEIMS
Advantech
6.3
1%
Sep 16Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Modbus transaction management…
CVE-2026-73167
EK
EKI-1242IEIMS
Advantech
8.6
1%
Sep 16Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface…
CVE-2026-73166
EK
EKI-1242IEIMS
Advantech
8.6
1%
Sep 16Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in…
CVE-2026-73165
EK
EKI-1242IEIMS
Advantech
8.6
1%
Sep 16Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface…
CVE-2026-73164
EK
EKI-1242IEIMS
Advantech
8.6
1%
Sep 16Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface…
CVE-2026-73163
EK
EKI-1242EIMS
Advantech
8.6
1%
Sep 16Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface…
CVE-2026-19535
EK
EKI-1242IEIMS
Advantech
8.6
0%
Sep 16Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advantech EKI-1242IEIMS in firmware version…
CVE-2026-79698
WI
WISE-6610-EL-EB
Advantech
9.9
3%
Sep 7Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection
CVE-2026-79697
WI
WISE-6610P-DNA
Advantech
9.9
5%
Sep 7Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injection
CVE-2026-43833
AD
ADAM-3600
Advantech
5.3
0%
Jul 31A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution
CVE-2026-43832
AD
ADAM-3600
Advantech
7.5
1%
Jul 31A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is…
CVE-2026-43831
AD
ADAM-3600
Advantech
7.5
1%
Jul 31A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution
CVE-2026-43830
AD
ADAM-3600
Advantech
9.8
3%
Jul 31A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands
CVE-2026-43829
AD
ADAM-3600
Advantech
7.5
1%
Jul 31A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is…
CVE-2026-14162
HQ
Hospital Quering Management
Advantech
9.8
1%
Jun 30Advantech｜Hospital Quering Management - Missing Authentication
CVE-2026-14161
HQ
Hospital Queuing Management
Advantech
7.5
1%
Jun 30Advantech｜Hospital Queuing Management - Sensitive Data Exposure
CVE-2026-6888
SC
SaaS Composer
Advantech
7.2
0%
May 13SQL Injection Vulnerability
CVE-2025-52694
IS
Iotsuite Saas Composer
Advantech
9.8
40%
Jan 12Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is…
CVE-2025-67653
WE
Webaccess/scada
Advantech
7.5
1%
Dec 18Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence of arbitrary files
CVE-2025-46268
WE
Webaccess/scada
Advantech
8.8
0%
Dec 18Advantech WebAccess/SCADA  is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands
CVE-2025-14850
WE
Webaccess/scada
Advantech
9.1
1%
Dec 18Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files
CVE-2025-14849
WE
Webaccess/scada
Advantech
9.8
1%
Dec 18Advantech WebAccess/SCADA  is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code
CVE-2025-14848
WE
Webaccess/scada
Advantech
5.3
1%
Dec 18Advantech WebAccess/SCADA is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary files
CVE-2025-34266
WS
Wise-deviceon Server
Advantech
5.4
0%
Dec 5Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/plugin-config/addins/menus endpoint
CVE-2025-34265
WS
Wise-deviceon Server
Advantech
5.4
0%
Dec 5Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/rule-engines endpoint
CVE-2025-34264
WS
Wise-deviceon Server
Advantech
5.4
0%
Dec 5Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/dog/{agentId} endpoint
CVE-2025-34263
WS
Wise-deviceon Server
Advantech
5.4
0%
Dec 5Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/plugin-config/dashboards/menus endpoint