Skip to content
OpenAdvisories

Vendor

Advantech

202 known vulnerabilities.

Products

WebAccess 31 ADAM-3600 31 EKI-6333AC-2G 20 EKI-6333AC-2GD 20 EKI-6333AC-1GPO 20 iView 17 WebAccess/SCADA 17 EKI-1242IEIMS 15 EKI-1242EIMS 15 WebAccess/VPN 12 WISE-DeviceOn Server 11 Advantech WebAccess 9 Advantech Wireless Sensing and Equipment (WISE) 8 R-SeeNet 6 EKI-1524 5 EKI-1522 5 EKI-1521 5 DeviceOn/iEdge 4 ADAM-5630 4 WISE-6610-NB 3 WISE-6610-EB 3 WISE-6610-TB 3 WISE-6610-JB 3 WISE-6610-CB 3 WISE-6610-EL-NB 3 WISE-6610-EL-EB 3 WISE-6610-EL-TB 3 WISE-6610-EL-JB 3 WISE-6610-EL-CB 3 WISE-6610P-DEA 3 WISE-6610P-DNA 3 WISE-6610P-DTA 3 ADAM 5550 2 HMI Designer 2 WebAccess/NMS 1 SaaS Composer 1 IoTSuite Growth Linux docker 1 IoTSuite Starter Linux docker 1 IoT Edge Linux docker 1 IoT Edge Windows 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.2
    CVE-2026-2670 Public exploit EPSS 14%

    Advantech WISE-6610-NB Background Management openvpn_apply os command injection

    A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_2025…

    Advantech WISE-6610-EL-EB WISE-6610-EL-JB WISE-6610-EB
  • High 8.1
    CVE-2025-48466 Public exploit

    Modbus Command Injection without Authentication

    Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.

    Advantech Advantech Wireless Sensing and Equipment (WISE)
  • High 7.5
    CVE-2014-2364 Public exploit EPSS 61%

    Advantech WebAccess Stack-Based Buffer Overflow

    Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter…

    Advantech WebAccess
  • High 7.5
    CVE-2014-0763 Public exploit EPSS 16%

    Advantech WebAccess SQL Injection

    An attacker using SQL injection may use arguments to construct queries without proper sanitization. The DBVisitor.dll is exposed through SOAP interfaces, and the exposed functions are vulnerable to SOAP injection. This may allow unexpected SQL action and acce…

    Advantech WebAccess