Vendor
Advantech
202 known vulnerabilities.
Products
87 results · Clear filters · Feed
-
High 8.6
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execu…
-
High 8.6
A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the …
-
High 8.6
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated at…
-
High 7.5
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execut…
-
High 8.2
A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to…
-
High 8.2
A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
-
High 8.2
A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
-
High 8.6
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the sys…
-
High 8.2
A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without r…
-
High 8.6
A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achiev…
-
High 8.7
A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker t…
-
High 7.5
A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentic…
-
High 8.6
A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware…
-
High 7.5
A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to…
-
High 8.6
Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware…
-
High 8.6
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Comman…
-
High 7.1
Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway compon…
-
High 8.7
Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserv…
-
High 8.8
Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver …
-
High 8.6
Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore wor…
-
High 8.6
Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in th…
-
High 8.6
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Comman…
-
High 8.6
Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in th…
-
High 8.6
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Comman…
-
High 8.6
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Comman…
-
High 8.6
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Comman…
-
High 8.6
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative w…
-
High 7.5
A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achiev…
-
High 8.6
A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute …
-
High 7.5
Advantech｜Hospital Queuing Management - Sensitive Data Exposure
Hospital Quening Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access a specific URL to obtain API documentation.
-
High 7.2
SQL Injection Vulnerability
Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitrary commands via a specific interface, potentially enabling the attacker to access, modify, or delete sensitive information within the data…
-
High 7.2
Advantech WISE-6610-NB Background Management openvpn_apply os command injection
A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_2025…
-
High 8.8
Advantech WebAccess/SCADA Unrestricted Upload of File with Dangerous Type
Advantech WebAccess/SCADA is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code.
-
High 8.1
Advantech WebAccess/SCADA Improper Limitation of a Pathname to a Restricted Directory
Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files.
-
High 7.8
An Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary m…
-
High 7.5
Advantech iView SQL Injection
Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap (Port 162) requests, which could allow an attacker to inject SQL commands.
-
High 8.8
Advantech DeviceOn/iEdge Path Traversal
Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to cause a denial-of-service condition, traverse directories, or read/write files, within the context of the local system account.
-
High 7.5
Advantech DeviceOn/iEdge Path Traversal
Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions.
-
High 8.8
Advantech DeviceOn/iEdge Path Traversal
Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions.
-
High 8.8
Advantech iView < v5.7.04 Build 6425 ztp_config_id Parameter SQL Injection Information Disclosure
Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘ztp_config_id’ parameter to the ‘…