Approved changes feed: RSS · Atom

cpe:2.3:a:advantech:webaccess_scada:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdvantech (fedf766b-bee1-5692-bcc7-1aa8d9dc594c)
ProductWebaccess Scada (8be2a6a1-1ba1-5e2c-a890-88f38413521f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-38431 vulnerable 2026-06-08 05:33:47.320089 Advantech WebAccess SCADA
MEDIUM (4.3)
An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users.
Published: 2021-10-15T12:29:48.409Z
Updated: 2024-09-16T18:28:58.187Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8845 vulnerable 2026-06-08 05:12:06.552017 Details available
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a heap-based buffer overflow vulnerability has been identified, which may allow an attacker to execute arbitrary code.
Published: 2018-05-15T22:00:00.000Z
Updated: 2024-09-17T04:20:14.985Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8841 vulnerable 2026-06-08 05:12:06.546914 Details available
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an improper privilege management vulnerability may allow an authenticated user to modify files when read access should only be given to the user.
Published: 2018-05-15T22:00:00.000Z
Updated: 2024-09-16T16:14:04.315Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7505 vulnerable 2026-06-08 05:12:03.778629 Details available
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a TFTP application has unrestricted file uploads to the web application without authorization, which may allow an attacker to execute arbitrary code.
Published: 2018-05-15T22:00:00.000Z
Updated: 2024-09-16T22:29:56.539Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7503 vulnerable 2026-06-08 05:12:03.777688 Details available
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a path transversal vulnerability has been identified, which may allow an attacker to disclose sensitive information on the target.
Published: 2018-05-15T22:00:00.000Z
Updated: 2024-09-16T17:24:19.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7501 vulnerable 2026-06-08 05:12:03.773497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7499 vulnerable 2026-06-08 05:12:03.768586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7497 vulnerable 2026-06-08 05:12:03.765060 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7495 vulnerable 2026-06-08 05:12:03.761853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10591 vulnerable 2026-06-08 05:10:26.843829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10590 vulnerable 2026-06-08 05:10:26.843272 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10589 vulnerable 2026-06-08 05:10:26.841930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.