Medium · 6.3 CVE-2025-46268 EUVD-2025-204316GHSA-pfgh-3rp7-865r

Advantech WebAccess/SCADA SQL Injection

Published Dec 18, 2025 · Updated Dec 18, 2025 · Assigned by icscert

Vendor: Advantech Product: WebAccess/SCADA

Description

Advantech WebAccess/SCADA
is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands.

Affected products

Vendor	Product	Affected	Fixed
Advantech	WebAccess/SCADA	9.2.1	—

Advisories 1

ICSA-25-352-06 Advantech WebAccess/SCADA CISA ICS & IT advisories · Dec 18, 2025

References