Advantech WebAccess/SCADA

Name: Advantech WebAccess/SCADA
Brand: Advantech

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

15critical11high9medium0low

updated 2026-10-28

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-10993US	critical9.8	10.7% (96th)	—	no fix	2019-06-28	≤ 8.3.5
CVE-2019-10991US	critical9.8	8.98% (95th)	—	no fix	2019-06-28	≤ 8.3.5
CVE-2019-10989US	critical9.8	8.55% (95th)	—	no fix	2019-06-28	≤ 8.3.5
CVE-2019-6550US	critical9.8	6.09% (93rd)	—	no fix	2019-04-05	2 versions
CVE-2019-10987US	high8.8	5.65% (93rd)	—	no fix	2019-06-28	≤ 8.3.5
CVE-2019-3975US	critical9.8	4.57% (92nd)	—	no fix	2019-09-10	≤ 8.4.1
CVE-2019-6552US	critical9.8	3.27% (88th)	—	no fix	2019-04-05	2 versions
CVE-2019-10985US	critical9.1	3.11% (88th)	—	no fix	2019-06-28	≤ 8.3.5
CVE-2019-6519US	critical9.8	2.81% (86th)	—	no fix	2019-02-05	—
CVE-2023-1437US	critical9.8	2.80% (86th)	—	9.1.4	2023-08-02	2 versions
CVE-2019-10983US	high7.5	2.38% (84th)	—	no fix	2019-06-28	≤ 8.3.5
CVE-2018-18999US	high7.3	2.31% (83rd)	—	no fix	2018-12-19	—
CVE-2021-32954US	medium6.5	2.08% (81st)	—	no fix	2021-06-18	≤ 9.0.1
CVE-2019-6523US	critical9.8	2.00% (81st)	—	no fix	2019-02-05	—
CVE-2019-6521US	high8.6OT elevated	1.93% (80th)	—	no fix	2019-02-05	—
CVE-2021-32943US	critical9.8	1.87% (79th)	—	8.4.5	2021-08-10	2 versions
CVE-2018-5445US	medium5.3	1.83% (79th)	—	8.2_20170817	2018-01-25	< 8.2_20170817
CVE-2019-6554US	high7.5	1.57% (75th)	—	no fix	2019-04-05	2 versions
CVE-2020-25161US	high8.8	1.56% (75th)	—	no fix	2021-02-23	≤ 9.0
CVE-2018-5443US	medium5.3	1.20% (68th)	—	8.2_20170817	2018-01-25	< 8.2_20170817
CVE-2021-22669US	high8.8	1.17% (67th)	—	no fix	2021-04-26	≤ 9.0.1
CVE-2021-22674US	medium6.5	1.09% (65th)	—	8.4.5	2021-08-10	2 versions
CVE-2025-14850US	critical9.1	0.94% (61st)	—	no fix	2025-12-18	2 versions
CVE-2023-32540US	critical9.8	0.90% (59th)	—	no fix	2023-06-06	2 versions
CVE-2023-22450US	high7.2	0.83% (57th)	—	no fix	2023-06-06	2 versions
CVE-2025-67653US	high7.5	0.72% (54th)	—	no fix	2025-12-18	2 versions
CVE-2021-27436US	medium6.1	0.71% (53rd)	—	no fix	2021-03-18	≤ 9.0
CVE-2023-32628US	critical9.8	0.71% (53rd)	—	no fix	2023-06-06	2 versions
CVE-2021-32956US	medium6.1	0.70% (53rd)	—	no fix	2021-06-18	≤ 9.0.1
CVE-2021-38431US	medium4.3OT elevated	0.70% (53rd)	—	no fix	2021-10-15	≤ 9.0.3
CVE-2025-14848US	medium5.3	0.66% (51st)	—	no fix	2025-12-18	2 versions
CVE-2021-22676US	medium6.1	0.64% (51st)	—	8.4.5	2021-08-10	2 versions
CVE-2025-14849US	critical9.8	0.62% (49th)	—	no fix	2025-12-18	2 versions
CVE-2026-6888US	—	0.38% (31st)	—	no fix	2026-05-13	≤ prior to version 9.2.3
CVE-2025-46268US	high8.8	0.33% (26th)	—	no fix	2025-12-18	2 versions
CVE-2024-2453US	—	0.30% (23rd)	—	no fix	2024-03-21	3 versions
CVE-2023-2866US	high7.8OT elevated	0.14% (4th)	—	no fix	2023-06-07	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write7 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')6 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type3 CVEs
CWE-23Relative Path Traversal2 CVEs
CWE-287Improper Authentication2 CVEs

sources (2)

Which sources assert this record, and when.

USCISA CSAF OT advisories (ICS)35 CVEs
EUEU Vulnerability Database (ENISA)16 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan