Medium · 4.3 CVE-2025-14848 EUVD-2025-204315GHSA-pv73-6jm3-25wx

Advantech WebAccess/SCADA Absolute Path Traversal

Published Dec 18, 2025 · Updated Dec 18, 2025 · Assigned by icscert

Vendor: Advantech Product: WebAccess/SCADA

Description

Advantech WebAccess/SCADA
is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary files.

Affected products

Vendor	Product	Affected	Fixed
Advantech	WebAccess/SCADA	9.2.1	—

Advisories 1

ICSA-25-352-06 Advantech WebAccess/SCADA CISA ICS & IT advisories · Dec 18, 2025

References