High · 8.8 CVE-2025-14849 EUVD-2025-204323GHSA-52hq-8xj9-8pmr

Advantech WebAccess/SCADA Unrestricted Upload of File with Dangerous Type

Published Dec 18, 2025 · Updated Dec 18, 2025 · Assigned by icscert

Vendor: Advantech Product: WebAccess/SCADA

Description

Advantech WebAccess/SCADA
is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code.

Affected products

Vendor	Product	Affected	Fixed
Advantech	WebAccess/SCADA	9.2.1	—

Advisories 1

ICSA-25-352-06 Advantech WebAccess/SCADA CISA ICS & IT advisories · Dec 18, 2025

References