Critical · 9.0 CVE-2014-2366 EUVD-2014-2403GHSA-c244-prpx-2q63

Advantech WebAccess Cleartext Storage of Sensitive Information in Memory

Published Jul 19, 2014 · Updated Oct 6, 2025 · Assigned by icscert

Description

upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code.

Vendor	Product	Affected	Fixed
Advantech	WebAccess	≤ 7.1	7.2

CNA	v2.0	9.0
EUVD	v2.0	9.0