Browse CVEs

CRITICAL 9.8 CVE-2020-14501 Advantech iView, versions 5.6 and prior, has an improper authentication for critical function (CWE-306) issue. Successful exploitation of this vulner… Iview after 5.6 Fix from $2,3002020-07-15 CRITICAL 9.8 CVE-2020-14503 Advantech iView, versions 5.6 and prior, has an improper input validation vulnerability. Successful exploitation of this vulnerability could allow an… Iview after 5.6 Fix from $2,3002020-07-15 HIGH 7.5 CVE-2020-14499 Advantech iView, versions 5.6 and prior, has an improper access control vulnerability. Successful exploitation of this vulnerability may allow an att… Iview after 5.6 Fix from $1,9502020-07-15 CRITICAL 9.8 CVE-2020-14497 Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-controlled str… Iview after 5.6 Fix from $2,3002020-07-15 CRITICAL 9.8 CVE-2020-14505EPSS 7% Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command (“command injection”) vulnerability. Su… Iview after 5.6 Fix from $2,3002020-07-15 CRITICAL 9.8 CVE-2020-14507 Advantech iView, versions 5.6 and prior, is vulnerable to multiple path traversal vulnerabilities that could allow an attacker to create/download arb… Iview after 5.6 Fix from $2,3002020-07-15 CRITICAL 9.8 CVE-2020-12019 WebAccess Node Version 8.4.4 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code. Webaccess after 8.4.4 Fix from $2,3002020-06-15 CRITICAL 9.8 CVE-2020-10638EPSS 7% Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple heap-based buffer overflow vulnerabilities exist caused by a lack of prope… Webaccess after 8.4.4 Fix from $2,3002020-05-08 CRITICAL 9.8 CVE-2020-12002EPSS 9% Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple stack-based buffer overflow vulnerabilities exist caused by a lack of prop… Webaccess after 8.4.4 Fix from $2,3002020-05-08 CRITICAL 9.8 CVE-2020-12006 Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow a low privile… Webaccess after 8.4.4 Fix from $2,3002020-05-08 CRITICAL 9.8 CVE-2020-12022 Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An improper validation vulnerability exists that could allow an attacker to inject … Webaccess after 8.4.4 Fix from $2,3002020-05-08 HIGH 8.8 CVE-2020-12026 Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow a low privile… Webaccess after 8.4.4 Fix from $1,9502020-05-08 HIGH 7.5 CVE-2020-12014 Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Input is not properly sanitized and may allow an attacker to inject SQL commands. Webaccess after 8.4.4 Fix from $1,9502020-05-08 HIGH 7.5 CVE-2020-12018 Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability exists that may allow access to unauthorized data. Webaccess after 8.4.4 Fix from $1,9502020-05-08 HIGH 7.1 CVE-2020-12010 Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow an authentica… Webaccess after 8.4.4 Fix from $1,9502020-05-08 CRITICAL 9.8 CVE-2020-10625 WebAccess/NMS (versions prior to 3.0.2) allows an unauthenticated remote user to create a new admin account. Webaccess\/nms 3.0.2+ Fix from $2,3002020-04-09 CRITICAL 9.8 CVE-2020-10631 An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's (versions prior to 3.0.2) control. Webaccess\/nms 3.0.2+ Fix from $2,3002020-04-09 CRITICAL 9.1 CVE-2020-10619EPSS 14% An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2) control. Webaccess\/nms 3.0.2+ Fix from $2,3002020-04-09 HIGH 8.8 CVE-2020-10603 WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely. Webaccess\/nms 3.0.2+ Fix from $1,9502020-04-09 HIGH 7.5 CVE-2020-10617 There are multiple ways an unauthenticated attacker could perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access to sensitiv… Webaccess\/nms 3.0.2+ Fix from $1,9502020-04-09 HIGH 7.5 CVE-2020-10629 WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive files. Webaccess\/nms 3.0.2+ Fix from $1,9502020-04-09 MEDIUM 6.5 CVE-2020-10623 Multiple vulnerabilities could allow an attacker with low privileges to perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain acce… Webaccess\/nms 3.0.2+ Fix from $1,6002020-04-09 CRITICAL 9.8 CVE-2020-10621 Multiple issues exist that allow files to be uploaded and executed on the WebAccess/NMS (versions prior to 3.0.2). Webaccess\/nms 3.0.2+ Fix from $2,3002020-04-09 HIGH 7.5 CVE-2019-3942 Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. An attacker can use this vu… Webaccess Mitigation only Fix from $1,9502020-04-01 HIGH 8.8 CVE-2020-10607 In Advantech WebAccess, Versions 8.4.2 and prior. A stack-based buffer overflow vulnerability caused by a lack of proper validation of the length of … Webaccess after 8.4.2 Fix from $1,9502020-03-27 CRITICAL 9.8 CVE-2019-18257 In Advantech DiagAnywhere Server, Versions 3.07.11 and prior, multiple stack-based buffer overflow vulnerabilities exist in the file transfer service… Diaganywhere after 3.07.11 Fix from $2,3002019-12-17 CRITICAL 9.8 CVE-2019-3951 Advantech WebAccess before 8.4.3 allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service (memory corruption) d… Webaccess 8.4.3+ Fix from $2,3002019-12-12 MEDIUM 6.5 CVE-2019-18229 Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Lack of sanitization of user-supplied input cause SQL injection vulnerabilities. An attacker can … Wise Paas\/rmm after 3.3.29 Fix from $1,6002019-10-31 HIGH 7.5 CVE-2019-18227 Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive data. Wise Paas\/rmm after 3.3.29 Fix from $1,9502019-10-31 CRITICAL 9.8 CVE-2019-13547 Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. There is an unsecured function that allows anyone who can access the IP address to use the functi… Wise Paas\/rmm after 3.3.29 Fix from $2,3002019-10-31