Skip to content
OpenAdvisories
High ICSA-25-352-06 5 CVEs

Advantech WebAccess/SCADA

Published Dec 18, 2025 · Updated Dec 18, 2025

Vendor: Advantech Product: WebAccess/SCADA

Summary

Successful exploitation of these vulnerabilities could allow an authenticated attacker to read or modify a remote database.

Vulnerabilities 5

  • High 8.8
    CVE-2025-14849

    Advantech WebAccess/SCADA Unrestricted Upload of File with Dangerous Type

    Advantech WebAccess/SCADA  is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code.

    Advantech WebAccess/SCADA
  • High 8.1
    CVE-2025-14850

    Advantech WebAccess/SCADA Improper Limitation of a Pathname to a Restricted Directory

    Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files.

    Advantech WebAccess/SCADA
  • Medium 6.3
    CVE-2025-46268

    Advantech WebAccess/SCADA SQL Injection

    Advantech WebAccess/SCADA  is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands.

    Advantech WebAccess/SCADA
  • Medium 4.3
    CVE-2025-14848

    Advantech WebAccess/SCADA Absolute Path Traversal

    Advantech WebAccess/SCADA is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary files.

    Advantech WebAccess/SCADA
  • Medium 4.3
    CVE-2025-67653

    Advantech WebAccess/SCADA Path Traversal

    Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence of arbitrary files.

    Advantech WebAccess/SCADA

Revision history

  1. #1

    Initial Publication

References