Advantech - vulnerabilities (CVEs)
434 CVEs in 129 products, 25 in the last 30 days, newest from 2026-10-20.
Products
- Webaccess - 103 CVEs
- Advantech Webaccess - 44 CVEs
- R-seenet - 40 CVEs
- Iview - 37 CVEs
- Adam-3600 - 31 CVEs
- Webaccess/scada - 29 CVEs
- Eki-6333ac-1gpo - 20 CVEs
- Eki-6333ac-1gpo Firmware - 20 CVEs
- Eki-6333ac-2g - 20 CVEs
- Eki-6333ac-2g Firmware - 20 CVEs
- Eki-6333ac-2gd - 20 CVEs
- Eki-6333ac-2gd Firmware - 20 CVEs
- Webaccess/nms - 20 CVEs
- Webaccessscada - 16 CVEs
- Eki-1242eims - 15 CVEs
- Eki-1242ieims - 15 CVEs
- Webaccess/hmi Designer - 12 CVEs
- Webaccess/vpn - 12 CVEs
- Webaccess Scada - 12 CVEs
- Webaccess Dashboard - 11 CVEs
- Wise-deviceon Server - 11 CVEs
- Advantech Wireless Sensing And Equipment Wise - 8 CVEs
- Wise-4010lan Firmware - 8 CVEs
- Wise-4050lan Firmware - 8 CVEs
- Wise-4060lan Firmware - 8 CVEs
- Webaccess Hmi Designer - 6 CVEs
- Deviceon/iedge - 5 CVEs
- Eki-1521 - 5 CVEs
- Eki-1521 Firmware - 5 CVEs
- Eki-1522 - 5 CVEs
- Eki-1522 Firmware - 5 CVEs
- Eki-1524 - 5 CVEs
- Eki-1524 Firmware - 5 CVEs
- Wise-paas/rmm - 5 CVEs
- Adam-5630 - 4 CVEs
- Deviceoniedge - 4 CVEs
- Adam-5630 Firmware - 3 CVEs
- Advantech Studio - 3 CVEs
- Spectre Rt Ert351 Firmware - 3 CVEs
- Susiaccess - 3 CVEs
- Wise-6610-cb - 3 CVEs
- Wise-6610-eb - 3 CVEs
- Wise-6610-el-cb - 3 CVEs
- Wise-6610-el-eb - 3 CVEs
- Wise-6610-el-jb - 3 CVEs
- Wise-6610-el-nb - 3 CVEs
- Wise-6610-el-tb - 3 CVEs
- Wise-6610-jb - 3 CVEs
- Wise-6610-nb - 3 CVEs
- Wise-6610-tb - 3 CVEs
- Wise-6610p-dea - 3 CVEs
- Wise-6610p-dna - 3 CVEs
- Wise-6610p-dta - 3 CVEs
- Adam 5550 - 2 CVEs
- Eki-1321 Series Firmware - 2 CVEs
- Eki-1322 Series Firmware - 2 CVEs
- Hmi Designer - 2 CVEs
- Adam-3600 Firmware - 1 CVEs
- Adam-5550 Firmware - 1 CVEs
- Adam-6015 - 1 CVEs
- Adam-6017 - 1 CVEs
- Adam-6018 - 1 CVEs
- Adam-6022 - 1 CVEs
- Adam-6024 - 1 CVEs
- Adam-6050 - 1 CVEs
- Adam-6050w - 1 CVEs
- Adam-6051 - 1 CVEs
- Adam-6051w - 1 CVEs
- Adam-6052 - 1 CVEs
- Adam-6060 - 1 CVEs
- Adam-6060w - 1 CVEs
- Adam-6066 - 1 CVEs
- Adam-6501 - 1 CVEs
- Adam 5550-firmware - 1 CVEs
- Adam Opc Server - 1 CVEs
- Adamview - 1 CVEs
- Bb-eswgp506-2sfp-t Firmware - 1 CVEs
- Deviceon/iservice - 1 CVEs
- Diaganywhere - 1 CVEs
- Ecowatch Saas-composer - 1 CVEs
- Eki-1200 Gateway Series Firmware - 1 CVEs
- Eki-122x Series Firmware - 1 CVEs
- Eki-1361 Series Firmware - 1 CVEs
- Eki-1362 Series Firmware - 1 CVEs
- Eki-6340 - 1 CVEs
- Eki-6340 Firmware - 1 CVEs
- Hospital Quering Management - 1 CVEs
- Hospital Queuing Management - 1 CVEs
- Iot Edge Linux Docker - 1 CVEs
- Iot Edge Windows - 1 CVEs
- Iotsuite And Iot Edge Products - 1 CVEs
- Iotsuite Growth Linux Docker - 1 CVEs
- Iotsuite Saas Composer - 1 CVEs
- Iotsuite Starter Linux Docker - 1 CVEs
- Modbus Rtu Opc Server - 1 CVEs
- Modbus Tcp Opc Server - 1 CVEs
- Saas Composer - 1 CVEs
- Sq Manager - 1 CVEs
- Susi - 1 CVEs
- Tp 3250 Firmware - 1 CVEs
- Vesp211-232 Firmware - 1 CVEs
- Vesp211-eu Firmware - 1 CVEs
- Webaccess Saas-composer - 1 CVEs
- Webaccessnms - 1 CVEs
- Webop - 1 CVEs
- Wise-paas/ota - 1 CVEs
- Adam-3600 Edgelink - 0 CVEs
- Adam-5550 - 0 CVEs
- Bb-eswgp506-2sfp-t - 0 CVEs
- Ecu-1251d - 0 CVEs
- Ecu-1251d08.04 - 0 CVEs
- Eki-1221 - 0 CVEs
- Eki-1221d - 0 CVEs
- Eki-1222 - 0 CVEs
- Eki-1222d - 0 CVEs
- Eki-1224 - 0 CVEs
- Eki-1321 - 0 CVEs
- Eki-1322 - 0 CVEs
- Eki-1361 - 0 CVEs
- Eki-1362 - 0 CVEs
- Spectre Rt Ert351 - 0 CVEs
- Tp 3250 - 0 CVEs
- Vesp211-232 - 0 CVEs
- Vesp211-eu - 0 CVEs
- Wise-4010lan - 0 CVEs
- Wise-4050lan - 0 CVEs
- Wise-4060lan - 0 CVEs
- Wise-6610 - 0 CVEs
- Wise-pass/rmm - 0 CVEs
Newest CVEs of Advantech
- CVE-2026-43858 - CVSS 8.6 (high), 2026-10-20: A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
- CVE-2026-43857 - CVSS 8.6 (high), 2026-10-20: A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.
- CVE-2026-43856 - CVSS 8.6 (high), 2026-10-20: A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code…
- CVE-2026-43855 - CVSS 7.5 (high), 2026-10-20: A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
- CVE-2026-43854 - CVSS 6.3 (medium), 2026-10-20: A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.
- CVE-2026-43853 - CVSS 8.2 (high), 2026-10-20: A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.
- CVE-2026-43852 - CVSS 8.2 (high), 2026-10-20: A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
- CVE-2026-43851 - CVSS 8.2 (high), 2026-10-20: A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
- CVE-2026-43850 - CVSS 8.6 (high), 2026-10-20: A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.
- CVE-2026-43849 - CVSS 6.9 (medium), 2026-10-20: A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.
- CVE-2026-43848 - CVSS 6.9 (medium), 2026-10-20: A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.
- CVE-2026-43847 - CVSS 8.2 (high), 2026-10-20: A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the…
- CVE-2026-43846 - CVSS 8.6 (high), 2026-10-20: A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.
- CVE-2026-43845 - CVSS 9.2 (critical), 2026-10-20: A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
- CVE-2026-43844 - CVSS 9.3 (critical), 2026-10-20: A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.
- CVE-2026-43843 - CVSS 6.9 (medium), 2026-10-20: An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.
- CVE-2026-43842 - CVSS 6.9 (medium), 2026-10-20: A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm…
- CVE-2026-43841 - CVSS 6.9 (medium), 2026-10-20: A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm…
- CVE-2026-43840 - CVSS 6.9 (medium), 2026-10-20: A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected…
- CVE-2026-43839 - CVSS 8.7 (high), 2026-10-20: A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.
- CVE-2026-43838 - CVSS 9.2 (critical), 2026-10-20: A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.
- CVE-2026-43837 - CVSS 7.5 (high), 2026-10-20: A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.
- CVE-2026-43836 - CVSS 9.3 (critical), 2026-10-20: A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.
- CVE-2026-43835 - CVSS 8.6 (high), 2026-10-20: A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising…
- CVE-2026-43834 - CVSS 7.5 (high), 2026-10-20: A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.
- CVE-2026-73177 - CVSS 8.6 (high), 2026-09-16: Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech…
- CVE-2026-73176 - CVSS 8.6 (high), 2026-09-16: Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web…
- CVE-2026-73175 - CVSS 7.1 (high), 2026-09-16: Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-1242EIMS in…
- CVE-2026-73174 - CVSS 8.7 (high), 2026-09-16: Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of Advantech…
- CVE-2026-73173 - CVSS 8.8 (high), 2026-09-16: Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech…
