Approved changes feed: RSS · Atom

cpe:2.3:a:advantech:webaccess:8.4.5:*:*:*:*:*:*:*

part: a version: 8.4.5 update: *

VendorAdvantech (fedf766b-bee1-5692-bcc7-1aa8d9dc594c)
ProductWebaccess (ebd8b910-9fe2-5d81-afde-a07cacb71fb1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2866 vulnerable 2026-06-03 14:51:44.556702 Advantech WebAccess Insufficient Type Distinction
HIGH (7.3)
If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker full control of the SCADA server.
Published: 2023-06-07T20:12:46.824Z
Updated: 2025-01-16T21:32:10.686Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.