Known vulnerabilities in WebAccess/SCADA

Vendor: Advantech Co., Ltd
Software: WebAccess/SCADA
Software CPE: cpe:2.3:a:advantech:webaccess_scada:*:*:*:*:*:*:*:*
Website: https://www.advantech.com/
Total vulnerabilities: 58
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WebAccess/SCADA WebAccess/SCADA is affected by 58 known vulnerabilities: 35 high, 12 medium, 11 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87732 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-2453		 CWE-89 Medium
No
No
 9.1.6 22.03.2024 SB2024032232
#VU76808 - Unrestricted Upload of File with Dangerous Type
CVE-2023-32628		 CWE-434 Low
No
No
 9.1.4 02.06.2023 SB2023060213
#VU76780 - Unrestricted Upload of File with Dangerous Type
CVE-2023-22450		 CWE-434 Low
No
No
 9.1.4 02.06.2023 SB2023060213
#VU76779 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-32540		 CWE-94 Low
No
No
 9.1.4 02.06.2023 SB2023060213
#VU76707 - Insufficient Type Distinction
CVE-2023-2866		 CWE-351 Medium
No
No
 9.1.4 31.05.2023 SB2023053137
#VU57330 - Missing Authorization
CVE-2021-38431		 CWE-862 Low
No
No
 9.1.1 13.10.2021 SB2021101311
#VU55635 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-22674		 CWE-22 Medium
No
No
 8.4.5, 9.0.1 06.08.2021 SB2021080606
#VU55634 - Stack-based buffer overflow
CVE-2021-32943		 CWE-121 High
No
No
 8.4.5, 9.0.1 06.08.2021 SB2021080606
#VU55633 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22676		 CWE-79 Low
No
No
 8.4.5, 9.0.1 06.08.2021 SB2021080606
#VU54218 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-32954		 CWE-22 Medium
No
No
 - 18.06.2021 SB2021061805
#VU54217 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-32956		 CWE-601 Medium
No
No
 - 18.06.2021 SB2021061805
#VU52201 - Incorrect Permission Assignment for Critical Resource
CVE-2021-22669		 CWE-732 Medium
No
No
 9.0.3 14.04.2021 SB2021041404
#VU51523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-27436		 CWE-79 Low
No
No
 9.0.1 17.03.2021 SB2021031709
#VU50759 - Incorrect Default Permissions
CVE-2020-13555		 CWE-276 Low
No
No
 9.0.2 17.02.2021 SB2021021705
#VU50758 - Incorrect Default Permissions
CVE-2020-13554		 CWE-276 Low
No
No
 9.0.2 17.02.2021 SB2021021705
#VU50754 - Incorrect Default Permissions
CVE-2020-13553		 CWE-276 Low
No
No
 9.0.2 17.02.2021 SB2021021705
#VU50746 - Incorrect Default Permissions
CVE-2020-13552		 CWE-276 Low
No
No
 9.0.2 17.02.2021 SB2021021705
#VU50743 - Incorrect Default Permissions
CVE-2020-13551		 CWE-276 Low
No
No
 9.0.2 17.02.2021 SB2021021705
#VU50742 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-13550		 CWE-22 Medium
No
No
 9.0.2 17.02.2021 SB2021021705
#VU47703 - External Control of File Name or Path
CVE-2020-25161		 CWE-73 Medium
No
No
 9.0.1 19.10.2020 SB2020101902


Showing elements 1 - 20 out of 58