Webaccess/Scada
Approved changes feed: RSS · Atom
cpe:2.3:a:advantech:webaccess\/scada:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Advantech (fedf766b-bee1-5692-bcc7-1aa8d9dc594c) |
|---|---|
| Product | Webaccess/Scada (eb40415d-1b79-5946-ba6d-49672f3502af) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-32628 |
vulnerable | 2026-06-08 06:04:46.660643 |
Details available
HIGH (7.2)
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify the file extension of a certificate file to ASP when uploading it, which can lead to remote code execution.
Published: 2023-06-05T23:14:00.388Z
Updated: 2025-01-08T14:22:34.205Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32540 |
vulnerable | 2026-06-08 06:04:46.485009 |
Details available
HIGH (7.2)
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability, which could allow an attacker to overwrite any file in the operating system (including system files), inject code into an XLS file, and modify the file extension, which could lead to arbitrary code execution.
Published: 2023-06-05T23:16:28.045Z
Updated: 2025-01-08T14:22:14.896Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22450 |
vulnerable | 2026-06-08 05:54:26.171502 |
Details available
HIGH (7.2)
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an ASP script file to a webserver when logged in as manager user, which can lead to arbitrary code execution.
Published: 2023-06-05T23:17:47.003Z
Updated: 2025-01-08T14:21:41.605Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1437 |
vulnerable | 2026-06-08 05:52:35.918964 |
CVE-2023-1437
CRITICAL (9.8)
All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent could contain raw memory pointers for the server to use as-is. This could allow an attacker to gain access to the remote file system and the ability to execute commands and overwrite files.
Published: 2023-08-02T22:30:43.978Z
Updated: 2024-08-02T05:49:11.643Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32956 |
vulnerable | 2026-06-08 05:32:08.255993 |
Details available
Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to redirection, which may allow an attacker to send a maliciously crafted URL that could result in redirecting a user to a malicious webpage.
Published: 2021-06-18T13:52:51.000Z
Updated: 2024-08-03T23:33:55.949Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32954 |
vulnerable | 2026-06-08 05:32:08.253722 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32943 |
vulnerable | 2026-06-08 05:32:08.241506 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27436 |
vulnerable | 2026-06-08 05:31:21.492381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22676 |
vulnerable | 2026-06-08 05:30:01.040166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22674 |
vulnerable | 2026-06-08 05:30:01.038947 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22669 |
vulnerable | 2026-06-08 05:30:01.026243 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25161 |
vulnerable | 2026-06-08 05:22:36.069308 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5445 |
vulnerable | 2026-06-08 05:11:51.041278 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5443 |
vulnerable | 2026-06-08 05:11:51.040863 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.