ICSA-25-352-06

icsaUScisa_csaf_ot

Advantech WebAccess/SCADA

Advisory ansehen veröffentlicht 2025-12-18

Successful exploitation of these vulnerabilities could allow an authenticated attacker to read or modify a remote database.

01

beschreibt (5)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-67653UShigh7.5—
Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence of arbitrary files.
CVE-2025-46268UShigh8.8—
Advantech WebAccess/SCADA  is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands.
CVE-2025-14850UScritical9.1—
Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files.
CVE-2025-14849UScritical9.8—
Advantech WebAccess/SCADA  is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code.
CVE-2025-14848USmedium5.3—
Advantech WebAccess/SCADA is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary files.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (5)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan