Webaccess/Scada

Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitrary commands via a specific interface, potentially enabling the attacker to access, modify, or delete sensitive information within the database.

Published: 2026-05-13T03:16:24.701Z
Updated: 2026-05-13T14:35:53.880Z

Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence of arbitrary files.

Published: 2025-12-18T20:38:12.958Z
Updated: 2025-12-18T21:46:25.952Z

Advantech WebAccess/SCADA  is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands.

Published: 2025-12-18T20:35:36.866Z
Updated: 2025-12-18T21:46:32.063Z

Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files.

Published: 2025-12-18T20:30:56.575Z
Updated: 2025-12-18T21:46:52.446Z

Advantech WebAccess/SCADA  is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code.

Published: 2025-12-18T20:32:38.746Z
Updated: 2025-12-18T21:46:46.491Z

Advantech WebAccess/SCADA is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary files.

Published: 2025-12-18T20:34:03.497Z
Updated: 2025-12-18T21:46:40.178Z

There is an SQL injection vulnerability in Advantech WebAccess/SCADA software that allows an authenticated attacker to remotely inject SQL code in the database. Successful exploitation of this vulnerability could allow an attacker to read or modify data on the remote database.

Published: 2024-03-21T22:39:15.488Z
Updated: 2024-08-01T19:11:53.526Z

In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify the file extension of a certificate file to ASP when uploading it, which can lead to remote code execution.

Published: 2023-06-05T23:14:00.388Z
Updated: 2025-01-08T14:22:34.205Z

In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability, which could allow an attacker to overwrite any file in the operating system (including system files), inject code into an XLS file, and modify the file extension, which could lead to arbitrary code execution.

Published: 2023-06-05T23:16:28.045Z
Updated: 2025-01-08T14:22:14.896Z

If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker full control of the SCADA server.

Published: 2023-06-07T20:12:46.824Z
Updated: 2025-01-16T21:32:10.686Z

In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an ASP script file to a webserver when logged in as manager user, which can lead to arbitrary code execution.

Published: 2023-06-05T23:17:47.003Z
Updated: 2025-01-08T14:21:41.605Z

All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent could contain raw memory pointers for the server to use as-is. This could allow an attacker to gain access to the remote file system and the ability to execute commands and overwrite files.

Published: 2023-08-02T22:30:43.978Z
Updated: 2024-08-02T05:49:11.643Z

Advantech WebAccess/SCADA, Versions 8.3.5 and prior. An improper access control vulnerability may allow an attacker to cause a denial-of-service condition.

Published: 2019-04-05T18:15:35.000Z
Updated: 2024-08-04T20:23:21.684Z

Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple command injection vulnerabilities, caused by a lack of proper validation of user-supplied data, may allow remote code execution.

Published: 2019-04-05T18:02:39.000Z
Updated: 2024-08-04T20:23:22.066Z

Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple stack-based buffer overflow vulnerabilities, caused by a lack of proper validation of the length of user-supplied data, may allow remote code execution.

Published: 2019-04-05T18:09:34.000Z
Updated: 2024-08-04T20:23:21.543Z

Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.1 allows a remote, unauthenticated attacker to execute arbitrary code via a crafted IOCTL 70603 RPC message.

Published: 2019-09-10T15:55:33.000Z
Updated: 2024-08-04T19:26:27.639Z