Known vulnerabilities in WebAccess/NMS

Vendor: Advantech Co., Ltd
Software: WebAccess/NMS
Software CPE: cpe:2.3:a:advantech:webaccess_nms:*:*:*:*:*:*:*:*
Website: https://www.advantech.com/
Total vulnerabilities: 20
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WebAccess/NMS WebAccess/NMS is affected by 20 known vulnerabilities: 9 high, 5 medium, 6 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU55930 - Improper Authentication
CVE-2021-32951		 CWE-287 Medium
No
No
 3.0.3 6299 18.08.2021 SB2021081802
#VU26713 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-10603		 CWE-78 High
No
No
 3.0.2 08.04.2020 SB2020040813
#VU26712 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-10629		 CWE-611 Medium
No
No
 3.0.2 08.04.2020 SB2020040813
#VU26711 - Missing Authentication for Critical Function
CVE-2020-10625		 CWE-306 Medium
No
No
 3.0.2 08.04.2020 SB2020040813
#VU26710 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-10631		 CWE-22 High
No
No
 3.0.2 08.04.2020 SB2020040813
#VU26709 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-10619		 CWE-22 High
No
No
 3.0.2 08.04.2020 SB2020040813
#VU26708 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-10623		 CWE-89 Medium
No
No
 3.0.2 08.04.2020 SB2020040813
#VU26707 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-10617		 CWE-89 Medium
No
No
 3.0.2 08.04.2020 SB2020040813
#VU26706 - Unrestricted Upload of File with Dangerous Type
CVE-2020-10621		 CWE-434 High
No
No
 3.0.2 08.04.2020 SB2020040813
#VU12759 - Improper Privilege Management
CVE-2018-8841		 CWE-269 Low
No
No
 - 16.05.2018 SB2018051607
#VU12758 - Origin Validation Error
CVE-2018-10591		 CWE-346 Low
No
No
 - 16.05.2018 SB2018051607
#VU12757 - External Control of File Name or Path
CVE-2018-7495		 CWE-73 Low
No
No
 - 16.05.2018 SB2018051607
#VU12756 - Untrusted Pointer Dereference
CVE-2018-7497		 CWE-822 High
No
No
 - 16.05.2018 SB2018051607
#VU12755 - Heap-based Buffer Overflow
CVE-2018-8845		 CWE-122 High
No
No
 - 16.05.2018 SB2018051607
#VU12754 - Stack-based buffer overflow
CVE-2018-7499		 CWE-121 High
No
No
 - 16.05.2018 SB2018051607
#VU12753 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-10589		 CWE-22 High
No
No
 - 16.05.2018 SB2018051607
#VU12752 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-7503		 CWE-22 Low
No
No
 - 16.05.2018 SB2018051607
#VU12751 - Improper Authorization
CVE-2018-7505		 CWE-285 High
No
No
 - 16.05.2018 SB2018051607
#VU12750 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10590		 CWE-200 Low
No
No
 - 16.05.2018 SB2018051607
#VU12749 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-7501		 CWE-89 Low
No
No
 - 15.05.2018 SB2018051607