advantech webaccess/scada

Name: advantech webaccess/scada
Brand: advantech

productUS

cpe:2.3:a:advantech:webaccess\/scada:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

8critical13high8medium0low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-13550US	high7.7	3.49% (89th)	—	no fix	2021-02-17	= 9.0.1
CVE-2019-6519US	critical9.8	2.81% (86th)	—	no fix	2019-02-05	= 8.3
CVE-2023-1437US	critical9.8	2.80% (86th)	—	9.1.4	2023-08-02	< 9.1.4
CVE-2018-18999US	high7.3	2.31% (83rd)	—	no fix	2018-12-19	= 8.3.2
CVE-2021-32954US	medium6.5	2.08% (81st)	—	no fix	2021-06-18	≤ 9.0.1
CVE-2019-6523US	critical9.8	2.00% (81st)	—	no fix	2019-02-05	= 8.3
CVE-2019-6521US	high8.6OT elevated	1.93% (80th)	—	no fix	2019-02-05	= 8.3
CVE-2021-32943US	critical9.8	1.87% (79th)	—	8.4.5	2021-08-10	2 versions
CVE-2018-5445US	medium5.3	1.83% (79th)	—	8.2_20170817	2018-01-25	< 8.2_20170817
CVE-2020-25161US	high8.8	1.56% (75th)	—	9.0.1	2021-02-23	< 9.0.1
CVE-2018-5443US	medium5.3	1.20% (68th)	—	8.2_20170817	2018-01-25	< 8.2_20170817
CVE-2021-22669US	high8.8	1.17% (67th)	—	no fix	2021-04-26	≤ 9.0.1
CVE-2021-22674US	medium6.5	1.09% (65th)	—	9.0.1	2021-08-10	2 versions
CVE-2025-14850US	critical9.1	0.94% (61st)	—	no fix	2025-12-18	= 9.2.1
CVE-2023-32540US	critical9.8	0.90% (59th)	—	no fix	2023-06-06	≤ 9.1.3
CVE-2023-22450US	high7.2	0.83% (57th)	—	no fix	2023-06-06	≤ 9.1.3
CVE-2025-67653US	high7.5	0.72% (54th)	—	no fix	2025-12-18	= 9.2.1
CVE-2021-27436US	medium6.1	0.71% (53rd)	—	no fix	2021-03-18	≤ 9.0
CVE-2023-32628US	critical9.8	0.71% (53rd)	—	no fix	2023-06-06	≤ 9.1.3
CVE-2021-32956US	medium6.1	0.70% (53rd)	—	no fix	2021-06-18	≤ 9.0.1
CVE-2025-14848US	medium5.3	0.66% (51st)	—	no fix	2025-12-18	= 9.2.1
CVE-2021-22676US	medium6.1	0.64% (51st)	—	8.4.5	2021-08-10	2 versions
CVE-2025-14849US	critical9.8	0.62% (49th)	—	no fix	2025-12-18	= 9.2.1
CVE-2020-13554US	high7.8OT elevated	0.55% (46th)	—	no fix	2021-03-03	= 9.0.1
CVE-2020-13555US	high8.8OT elevated	0.50% (43rd)	—	no fix	2021-02-17	= 9.0.1
CVE-2020-13553US	high8.8OT elevated	0.50% (43rd)	—	no fix	2021-02-17	= 9.0.1
CVE-2020-13552US	high8.8OT elevated	0.50% (43rd)	—	no fix	2021-02-17	= 9.0.1
CVE-2020-13551US	high8.8OT elevated	0.49% (42nd)	—	no fix	2021-02-17	= 9.0.1
CVE-2025-46268US	high8.8	0.33% (26th)	—	no fix	2025-12-18	= 9.2.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')6 CVEs
CWE-276Incorrect Default Permissions5 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-23Relative Path Traversal2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan