Vulnerabilidades em Advantech

144 resultados
Análise Vexday

Com 142 CVEs catalogadas, o portfólio da Advantech apresenta 21 vulnerabilidades de severidade crítica e 4 com prova de conceito pública disponível, o que representa superfície de ataque concreta para agentes com capacidade de exploração. A taxa de exploração ativa está abaixo da média geral do catálogo, com zero registros no CISA KEV, embora esse dado não elimine o risco, especialmente considerando que CVE-2014-2364 — a vulnerabilidade de maior destaque ativo — registra escore EPSS de 0,6138, indicando probabilidade relevante de exploração. A falha mais recorrente por tipo é CWE-89 (injeção de SQL), uma classe de vulnerabilidade bem documentada e com técnicas de exploração amplamente conhecidas, o que reforça a necessidade de atenção redobrada em ambientes que dependem de componentes Advantech expostos a redes. Equipes de segurança devem priorizar a revisão das vulnerabilidades críticas com PoC pública, particularmente em instalações de tecnologia operacional onde a janela de correção tende a ser mais restrita.

CVE-2018-10589—In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioEPSS 4.1%CVE-2018-7499—In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioEPSS 3.8%CVE-2025-46704MEDIUMAdvantech iView Path TraversalEPSS 3.6%CVE-2019-6552—Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple command injection vulnerabilities, caused by a lack of proper validation of usEPSS 3.3%CVE-2018-7497—In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioEPSS 2.9%CVE-2018-7505—In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioEPSS 2.9%CVE-2023-1437CRITICALCVE-2023-1437EPSS 2.8%CVE-2014-0767—Advantech WebAccess Stack-based Buffer OverflowEPSS 2.7%CVE-2014-0764—Advantech WebAccess Stack-based Buffer OverflowEPSS 2.7%CVE-2014-0768—Advantech WebAccess Stack-based Buffer OverflowEPSS 2.7%CVE-2014-0766—Advantech WebAccess Stack-based Buffer OverflowEPSS 2.7%CVE-2014-0765—Advantech WebAccess Stack-based Buffer OverflowEPSS 2.7%CVE-2014-0770—Advantech WebAccess Stack-based Buffer OverflowEPSS 2.6%CVE-2018-7503—In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioEPSS 2.5%CVE-2014-0773—Advantech WebAccess Command InjectionEPSS 2.5%CVE-2019-3941—Advantech WebAccess 8.3.4 allows unauthenticated, remote attackers to delete arbitrary files via IOCTL 10005 RPC.EPSS 2.4%CVE-2021-33023CRITICALAdvantech WebAccessEPSS 2.2%CVE-2018-14820—Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, whichEPSS 2.2%CVE-2018-7495—In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prioEPSS 2.2%CVE-2018-15707—Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page. An attacker could leverage this vulneEPSS 1.9%