Vendor
Advantech
202 known vulnerabilities.
Advantech at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 25 | 4 |
| Sep 2026 | 17 | 3 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 5 | 3 |
| Jun 2026 | 2 | 1 |
| May 2026 | 1 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 1 | 0 |
| Jan 2026 | 1 | 1 |
| Dec 2025 | 18 | 1 |
| Nov 2025 | 21 | 3 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 10 | 0 |
| Jun 2025 | 8 | 1 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
Products
Latest advisories
-
High max 8.8ICSA-25-352-06 5 CVEs
Advantech WebAccess/SCADA
Successful exploitation of these vulnerabilities could allow an authenticated attacker to read or modify a remote database.
-
High max 7.5ICSA-25-338-07 1 CVE
Advantech iView
Successful exploitation of this vulnerability could allow an attacker to disclose sensitive information, modify, or delete data.
-
High max 8.8ICSA-25-310-01 4 CVEs
Advantech DeviceOn/iEdge
Successful exploitation of these vulnerabilities could result in a denial-of-service condition, remote code execution, or an attacker reading arbitrary files.
-
High max 8.8ICSA-25-191-08 10 CVEs
Advantech iView
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, achieve remote code execution, or cause service disruptions.
-
Criticalfirst Jul 9, 2011
202 results · Feed
-
High 8.6
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execu…
-
High 8.6
A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the …
-
High 8.6
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated at…
-
High 7.5
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execut…
-
Medium 6.3
A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials …
-
High 8.2
A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to…
-
High 8.2
A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
-
High 8.2
A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
-
High 8.6
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the sys…
-
Medium 6.9
A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.
-
Medium 6.9
A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the servi…
-
High 8.2
A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without r…
-
High 8.6
A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achiev…
-
Critical 9.2
A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
-
Critical 9.3
A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.
-
Medium 6.9
An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the s…
-
Medium 6.9
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to cras…
-
Medium 6.9
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to cras…
-
Medium 6.9
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to cras…
-
High 8.7
A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker t…
-
Critical 9.2
A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code executio…
-
High 7.5
A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentic…
-
Critical 9.3
A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.
-
High 8.6
A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware…
-
High 7.5
A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to…
-
High 8.6
Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware…
-
High 8.6
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Comman…
-
High 7.1
Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway compon…
-
High 8.7
Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserv…
-
High 8.8
Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver …
-
Critical 9.3
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Comman…
-
High 8.6
Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore wor…
-
High 8.6
Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in th…
-
Medium 6.3
Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scri…
-
High 8.6
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Comman…
-
High 8.6
Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in th…
-
High 8.6
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Comman…
-
High 8.6
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Comman…
-
High 8.6
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Comman…
-
High 8.6
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative w…