Advantech Vulnerabilità

Sequenza temporale

Genere

Prodotto

Advantech WebAccess163
Advantech R-SeeNet39
Advantech SCADA29
Advantech iView22
Advantech WebAccess HMI Designer14

Contromisure

Official Fix156
Temporary Fix0
Workaround1
Unavailable0
Not Defined138

Sfruttabilità

High5
Functional0
Proof-of-Concept11
Unproven0
Not Defined279

Accesso al vettore

Not Defined0
Physical0
Local25
Adjacent11
Network259

Autenticazione

Not Defined0
High4
Low108
None183

Interazione dell'utente

Not Defined0
Required47
None248

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤48
≤514
≤633
≤775
≤875
≤968
≤1022

CVSSv3 Temp

≤10
≤20
≤30
≤48
≤514
≤661
≤767
≤863
≤962
≤1020

VulDB

≤10
≤20
≤30
≤418
≤520
≤649
≤758
≤8111
≤917
≤1022

NVD

≤10
≤20
≤30
≤40
≤52
≤610
≤714
≤862
≤922
≤1061

CNA

≤10
≤20
≤30
≤40
≤52
≤62
≤73
≤85
≤99
≤108

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k26
<2k127
<5k142
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k271
<2k18
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (42): ADAM-3600 (1), Adam-6501 (1), AdamView (1), Advantech Studio (1), BB-ESWGP506-2SFP-T (1), DeviceOn (2), DiagAnywhere Server (1), EKI-122x-BE (1), EKI-132x (1), EKI-136x (1), EKI-1200 Gateway (1), EKI-1521 (5), EKI-1522 (5), EKI-1524 (5), EKI-6340 (1), HMI Designer (4), MESR901 (1), Modbus RTU OPC Server (1), NMS (9), OTA Server (1), R-SeeNet (39), RMM (4), SCADA (29), SQ Manager Server (1), SUISAccess Server (3), Spectre RT ERT351 (2), Spectre RT Industrial Routers ERT351 (1), VESP211-232 (1), VESP211-EU (1), WISE-PaaS (5), WISE-PaaS RMM (1), WebAccess (163), WebAccess Dashboard (11), WebAccess HMI Designer (14), WebAccess Node (10), WebAccess SCADA (10), WebAccess Scada Node (11), WebAccss (3), WebOP (1), iEdge Server (1), iService (1), iView (22)

Link to Vendor Website: https://www.advantech.com/

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConEPSSCTICVE
21/03/20246.36.0Advantech WebAccess/SCADA sql injectionSCADA SoftwareNot DefinedOfficial Fix0.000430.02CVE-2024-2453
18/10/20238.58.5Advantech R-SeeNet snmpmon.ini rivelazione di un 'informazioneSconosciutoNot DefinedNot Defined0.008900.00CVE-2023-5642
17/10/20236.16.1Advantech WebAccess Credentials rivelazione di un 'informazioneSCADA SoftwareNot DefinedNot Defined0.000940.04CVE-2023-4215
08/08/20236.06.0Advantech EKI-1524/EKI-1522/EKI-1521 Web Interface cross site scriptingSconosciutoNot DefinedNot Defined0.000530.00CVE-2023-4203
08/08/20236.06.0Advantech EKI-1524/EKI-1522/EKI-1521 Web Interface cross site scriptingSconosciutoNot DefinedNot Defined0.000530.00CVE-2023-4202
31/07/20236.96.8Advantech iView checkSQLInjection sql injectionSconosciutoNot DefinedOfficial Fix0.000840.00CVE-2023-3983
22/06/20237.77.7Advantech R-SeeNet escalazione di privilegiSconosciutoNot DefinedNot Defined0.002980.00CVE-2023-3256
22/06/20239.89.6Advantech R-SeeNet autenticazione deboleSconosciutoNot DefinedNot Defined0.003010.00CVE-2023-2611
16/06/20239.89.4Advantech WebAccess/SCADA RPC buffer overflowSCADA SoftwareNot DefinedOfficial Fix0.000890.02CVE-2023-1437
01/06/20237.26.9Advantech WebAccss/SCADA Certificate File escalazione di privilegiSCADA SoftwareNot DefinedOfficial Fix0.001660.00CVE-2023-32628
01/06/20237.27.0Advantech WebAccss/SCADA escalazione di privilegiSCADA SoftwareNot DefinedOfficial Fix0.001070.04CVE-2023-22450
01/06/20238.18.0Advantech WebAccss/SCADA escalazione di privilegiSCADA SoftwareNot DefinedOfficial Fix0.001150.00CVE-2023-32540
30/05/20237.57.4Advantech WebAccess/SCADA ZIP File Local Privilege EscalationSCADA SoftwareNot DefinedOfficial Fix0.000540.02CVE-2023-2866
08/05/20238.88.8Advantech EKI-1524/EKI-1522/EKI-1521 POST buffer overflowSconosciutoNot DefinedNot Defined0.001700.00CVE-2023-2575
08/05/20238.88.8Advantech EKI-1524/EKI-1522/EKI-1521 escalazione di privilegiSconosciutoNot DefinedNot Defined0.004320.00CVE-2023-2574
08/05/20238.88.8Advantech EKI-1524/EKI-1522/EKI-1521 NTP Server escalazione di privilegiSconosciutoNot DefinedNot Defined0.004320.00CVE-2023-2573
21/10/20228.58.4Advantech R-SeeNet out Endpoint buffer overflowSconosciutoNot DefinedOfficial Fix0.002790.00CVE-2022-3386
21/10/20228.58.4Advantech R-SeeNet show_code Endpoint buffer overflowSconosciutoNot DefinedOfficial Fix0.002790.00CVE-2022-3385
21/10/20226.46.3Advantech R-SeeNet out.php directory traversalSconosciutoNot DefinedOfficial Fix0.003100.00CVE-2022-3387
28/09/20227.47.4Advantech iView ConfigurationServlet Endpoint checkSQLInjection sql injectionSconosciutoNot DefinedNot Defined0.002220.00CVE-2022-3323
22/07/20226.96.8Advantech iView directory traversalSconosciutoNot DefinedNot Defined0.066220.00CVE-2022-2139
22/07/20227.77.6Advantech iView autenticazione deboleSconosciutoNot DefinedNot Defined0.010500.00CVE-2022-2138
22/07/20229.89.6Advantech iView escalazione di privilegiSconosciutoNot DefinedNot Defined0.230800.04CVE-2022-2143
22/07/20227.17.0Advantech iView sql injectionSconosciutoNot DefinedNot Defined0.001950.00CVE-2022-2142
22/07/20224.84.7Advantech iView sql injectionSconosciutoNot DefinedNot Defined0.002210.00CVE-2022-2137

270 non vengono visualizzate più voci

Do you want to use VulDB in your project?

Use the official API to access entries easily!