Medium · 4.3 CVE-2025-67653 EUVD-2025-204324GHSA-4gh3-mcch-g7mg

Advantech WebAccess/SCADA Path Traversal

Published Dec 18, 2025 · Updated Dec 18, 2025 · Assigned by icscert

Vendor: Advantech Product: WebAccess/SCADA

Description

Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence of arbitrary files.

Affected products

Vendor	Product	Affected	Fixed
Advantech	WebAccess/SCADA	9.2.1	—

Advisories 1

ICSA-25-352-06 Advantech WebAccess/SCADA CISA ICS & IT advisories · Dec 18, 2025

References