Advantech Advantech Webaccess
9 CVEs affecting Advantech Advantech Webaccess. Latest disclosed: 2018-10-31. Critical: 2, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-14816 | Critical | 9.8 | 2018-10-23 | Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities that have been identified, which may allow an attacker to execute… |
CVE-2018-14806 | Critical | 9.8 | 2018-10-23 | Advantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an attacker to execute arbitrary code. |
CVE-2018-15704 | High | 8.8 | 2018-10-22 | Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attacker could potentially exploit this vuln… |
CVE-2018-14828 | High | 7.8 | 2018-10-23 | Advantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which may allow an attacker to access those files and perform actions… |
CVE-2018-14820 | High | 7.5 | 2018-10-23 | Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, which may allow an arbit… |
CVE-2018-15706 | Medium | 6.5 | 2018-10-31 | WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to read any file on the filesystem due to a directory traversal vu… |
CVE-2018-15705 | Medium | 6.5 | 2018-10-31 | WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a director… |
CVE-2018-15703 | Medium | 6.1 | 2018-10-22 | Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities. A remote unauthenticated attacker could potential… |
CVE-2018-15707 | Medium | 5.4 | 2018-10-31 | Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page. An attacker could leverage this vulnerability to disclos… |