Skip to content
OpenAdvisories

Vendor

Advantech

202 known vulnerabilities.

Products

WebAccess 31 ADAM-3600 31 EKI-6333AC-2G 20 EKI-6333AC-2GD 20 EKI-6333AC-1GPO 20 iView 17 WebAccess/SCADA 17 EKI-1242IEIMS 15 EKI-1242EIMS 15 WebAccess/VPN 12 WISE-DeviceOn Server 11 Advantech WebAccess 9 Advantech Wireless Sensing and Equipment (WISE) 8 R-SeeNet 6 EKI-1524 5 EKI-1522 5 EKI-1521 5 DeviceOn/iEdge 4 ADAM-5630 4 WISE-6610-NB 3 WISE-6610-EB 3 WISE-6610-TB 3 WISE-6610-JB 3 WISE-6610-CB 3 WISE-6610-EL-NB 3 WISE-6610-EL-EB 3 WISE-6610-EL-TB 3 WISE-6610-EL-JB 3 WISE-6610-EL-CB 3 WISE-6610P-DEA 3 WISE-6610P-DNA 3 WISE-6610P-DTA 3 ADAM 5550 2 HMI Designer 2 WebAccess/NMS 1 SaaS Composer 1 IoTSuite Growth Linux docker 1 IoTSuite Starter Linux docker 1 IoT Edge Linux docker 1 IoT Edge Windows 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.2
    CVE-2026-2670 Public exploit EPSS 14%

    Advantech WISE-6610-NB Background Management openvpn_apply os command injection

    A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_2025…

    Advantech WISE-6610-EL-EB WISE-6610-EL-JB WISE-6610-EB
  • Critical 10.0
    CVE-2025-52694 Public exploit EPSS 40%

    Execution of arbitrary SQL commands

    Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet, potentially affecting data confidentiality, integrity, an…

    Advantech IoTSuite and IoT Edge Products Browsers
  • High 8.1
    CVE-2025-48466 Public exploit

    Modbus Command Injection without Authentication

    Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.

    Advantech Advantech Wireless Sensing and Equipment (WISE)
  • Medium 5.0
    CVE-2025-48461 Public exploit

    Weak Session Cookie Entropy

    Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset p…

    Advantech Advantech Wireless Sensing and Equipment (WISE)
  • Unscored —
    CVE-2018-15705 Public exploit EPSS 12%

    WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any …

    Advantech Advantech WebAccess
  • Unscored —
    CVE-2018-15707 Public exploit

    Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page. An attacker coul…

    Advantech Advantech WebAccess
  • High 7.5
    CVE-2014-2364 Public exploit EPSS 61%

    Advantech WebAccess Stack-Based Buffer Overflow

    Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter…

    Advantech WebAccess
  • High 7.5
    CVE-2014-0763 Public exploit EPSS 16%

    Advantech WebAccess SQL Injection

    An attacker using SQL injection may use arguments to construct queries without proper sanitization. The DBVisitor.dll is exposed through SOAP interfaces, and the exposed functions are vulnerable to SOAP injection. This may allow unexpected SQL action and acce…

    Advantech WebAccess