Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-32951 EUVD-2021-19672GHSA-9rgm-96q6-gc9m

Advantech WebAccess/NMS Improper Authentication

Published Oct 27, 2021 · Updated Sep 16, 2024 · Assigned by icscert

Description

WebAccess/NMS (Versions prior to v3.0.3_Build6299) has an improper authentication vulnerability, which may allow unauthorized users to view resources monitored and controlled by the WebAccess/NMS, as well as IP addresses and names of all the devices managed via WebAccess/NMS.

Affected products

VendorProductAffectedFixed
Advantech WebAccess/NMS Versions – < v3.0.3_Build6299 v3.0.3_Build6299

Advisories 1

References