High · 8.1 CVE-2025-14850 EUVD-2025-204328GHSA-26jc-h8ww-vpqm

Advantech WebAccess/SCADA Improper Limitation of a Pathname to a Restricted Directory

Published Dec 18, 2025 · Updated Dec 18, 2025 · Assigned by icscert

Vendor: Advantech Product: WebAccess/SCADA

Description

Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files.

Affected products

Vendor	Product	Affected	Fixed
Advantech	WebAccess/SCADA	9.2.1	—

Advisories 1

ICSA-25-352-06 Advantech WebAccess/SCADA CISA ICS & IT advisories · Dec 18, 2025

References