Advantech
Vulnerability activity for Advantech: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 25
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 42
- Critical (CVSS 9+)
- 7
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 81
- Critical (CVSS 9+)
- 11
- Exploited (CISA KEV)
- 0
- With exploit code
- 1
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 8.6HighOct 20, 2026Advantech ADAM-3600 Memory corruptionCVE-2026-43858A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
- 8.6HighOct 20, 2026Advantech ADAM-3600 Code / command injectionCVE-2026-43857A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.
- 8.6HighOct 20, 2026Advantech ADAM-3600 Memory corruptionCVE-2026-43856A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.
- 7.5HighOct 20, 2026Advantech ADAM-3600 Memory corruptionCVE-2026-43855A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
- 6.3MediumOct 20, 2026Advantech ADAM-3600 Crypto / certificateCVE-2026-43854A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.
- 8.2HighOct 20, 2026Advantech ADAM-3600CVE-2026-43853A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.
- 8.2HighOct 20, 2026Advantech ADAM-3600 Path traversal / file handlingCVE-2026-43852A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
- 8.2HighOct 20, 2026Advantech ADAM-3600 Path traversal / file handlingCVE-2026-43851A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
- 8.6HighOct 20, 2026Advantech ADAM-3600 Code / command injectionCVE-2026-43850A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.1.6% likely
- 6.9MediumOct 20, 2026Advantech ADAM-3600 Memory corruptionCVE-2026-43849A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.
- 6.9MediumOct 20, 2026Advantech ADAM-3600 Denial of serviceCVE-2026-43848A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.
- 8.2HighOct 20, 2026Advantech ADAM-3600CVE-2026-43847A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.
- 8.6HighOct 20, 2026Advantech ADAM-3600 Memory corruptionCVE-2026-43846A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.
- 9.2CriticalOct 20, 2026Advantech ADAM-3600 Auth bypass / access controlCVE-2026-43845A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
- 9.3CriticalOct 20, 2026Advantech ADAM-3600 Auth bypass / access controlCVE-2026-43844A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.
- 6.9MediumOct 20, 2026Advantech ADAM-3600 Memory corruptionCVE-2026-43843An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.
- 6.9MediumOct 20, 2026Advantech ADAM-3600 Memory corruptionCVE-2026-43842A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.
- 6.9MediumOct 20, 2026Advantech ADAM-3600 Memory corruptionCVE-2026-43841A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.
- 6.9MediumOct 20, 2026Advantech ADAM-3600 Memory corruptionCVE-2026-43840A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.
- 8.7HighOct 20, 2026Advantech ADAM-3600 Memory corruptionCVE-2026-43839A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.
- 9.2CriticalOct 20, 2026Advantech ADAM-3600 Memory corruptionCVE-2026-43838A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.
- 7.5HighOct 20, 2026Advantech ADAM-3600 Memory corruptionCVE-2026-43837A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.
- 9.3CriticalOct 20, 2026Advantech ADAM-3600 Code / command injectionCVE-2026-43836A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.
- 8.6HighOct 20, 2026Advantech ADAM-3600 Auth bypass / access controlCVE-2026-43835A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.
- 7.5HighOct 20, 2026Advantech ADAM-3600 Memory corruptionCVE-2026-43834A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.
- 8.6HighSep 16, 2026Advantech EKI-1242IEIMS Auth bypass / access controlCVE-2026-73177Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01. The device accepts firmware images through the authenticated web management interface without performing any cryptographic signature or certificate verification. An authenticated administrator-level attacker can install arbitrary modified firmware on the device, enabling full persistent compromise of
- 8.6HighSep 16, 2026Advantech EKI-1242IEIMS Code / command injectionCVE-2026-73176Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.
- 7.1HighSep 16, 2026Advantech EKI-1242IEIMS Denial of serviceCVE-2026-73175Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows an adjacent unauthenticated attacker to exhaust the server session pool and cause a complete denial of service to all legitimate OPC UA clients by opening multiple anonymous sessions.
- 8.7HighSep 16, 2026Advantech EKI-1242IEIMS Information disclosureCVE-2026-73174Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a network-adjacent passive observer to intercept management traffic and recover sensitive device identity and network metadata in cleartext.
- 8.8HighSep 16, 2026Advantech EKI-1242IEIMS Auth bypass / access controlCVE-2026-73173Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to invoke critical device-management functions, including network reconfiguration, reboot, reset, and firmware upgrade, by sending crafted requests to TCP port 5058.
- 9.3CriticalSep 16, 2026Advantech EKI-1242IEIMS Code / command injectionCVE-2026-73172Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the edgserver management service of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to execute arbitrary OS commands as root via crafted requests to TCP port 5058.
- 8.6HighSep 16, 2026Advantech EKI-1242IEIMS Path traversal / file handlingCVE-2026-73171Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to overwrite arbitrary files on the device filesystem by uploading a crafted backup archive through the web management interface.
- 8.6HighSep 16, 2026Advantech EKI-1242IEIMS Code / command injectionCVE-2026-73170Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary Lua code on the device via a crafted imported file.
- 6.3MediumSep 16, 2026Advantech EKI-1242IEIMS XSSCVE-2026-73169Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Modbus transaction management interface of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to store malicious script content that executes in the browser of any administrator who later opens an affected management page.
- 8.6HighSep 16, 2026Advantech EKI-1242IEIMS Code / command injectionCVE-2026-73167Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.
- 8.6HighSep 16, 2026Advantech EKI-1242IEIMS Code / command injectionCVE-2026-73166Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS commands as root.
- 8.6HighSep 16, 2026Advantech EKI-1242IEIMS Code / command injectionCVE-2026-73165Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.
- 8.6HighSep 16, 2026Advantech EKI-1242IEIMS Code / command injectionCVE-2026-73164Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.
- 8.6HighSep 16, 2026Advantech EKI-1242IEIMS Code / command injectionCVE-2026-73163Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.
- 8.6HighSep 16, 2026Advantech EKI-1242IEIMS CSRFCVE-2026-19535Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to perform unauthorized state-changing requests on behalf of a logged-in administrator, enabling unauthorized access to privileged management functions.
- 9.9CriticalSep 7, 2026Advantech WISE-6610-NB Code / command injectionCVE-2026-79698A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251110. This vulnerability affects the function nodered_lib_apply of the component Node-RED Library. Such manipulation of the argument act leads to command injection. The attack can be launched remotely. The exploit is publicly available and m
- 9.9CriticalSep 7, 2026Advantech WISE-6610-NB Code / command injectionCVE-2026-79697A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251110. This affects the function basicstation_apply of the component Basic Station Certificate-Deletion Handler. This manipulation of the argument act causes command injection. The attack can be initiated remotely. The exploit has been public
- 10.0CriticalJan 12, 2026Advantech iot edge linux docker SQL injectionCVE-2025-52694Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet, potentially affecting data confidentiality, integrity, and availability. Users and administrators of affected product versions are advised to update to the latest versions immediately.40% likelyNucleiDetection
- 4.3MediumDec 18, 2025Advantech webaccess\/scada Path traversal / file handlingCVE-2025-67653Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence of arbitrary files.
- 6.3MediumDec 18, 2025Advantech webaccess\/scada SQL injectionCVE-2025-46268Advantech WebAccess/SCADA is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands.
- 8.1HighDec 18, 2025Advantech webaccess\/scada Path traversal / file handlingCVE-2025-14850Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files.
- 8.8HighDec 18, 2025Advantech webaccess\/scada Path traversal / file handlingCVE-2025-14849Advantech WebAccess/SCADA is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code.
- 4.3MediumDec 18, 2025Advantech webaccess\/scada Path traversal / file handlingCVE-2025-14848Advantech WebAccess/SCADA is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary files.
- 5.4MediumDec 5, 2025Advantech wise-deviceon server XSSCVE-2025-34266Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/plugin-config/addins/menus endpoint. When an authenticated user adds or edits an AddIns menu entry, the label and path values are stored in plugin configuration data and later rendered in the AddIns UI without proper HTML sanitation. An attacker can inject malicious script into either field, which is then executed in the browser context of users who view or interact with
- 5.4MediumDec 5, 2025Advantech wise-deviceon server XSSCVE-2025-34265Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/rule-engines endpoint. When an authenticated user creates or updates a rule for an agent, the rule fields min, max, and unit are stored and later rendered in rule listings or detail views without proper HTML sanitation. An attacker can inject malicious script into one or more of these fields, which is then executed in the browser context of users who view or interact with
Top products
- ADAM-360025 CVEs in the last year, 4 critical
- EKI-1242IEIMS15 CVEs in the last year, 1 critical
- webaccess\/vpn12 CVEs in the last year
- wise-deviceon server11 CVEs in the last year, 1 critical
- webaccess\/scada5 CVEs in the last year
- iview5 CVEs in the last year, 2 critical
- deviceon\/iedge4 CVEs in the last year
- WISE-6610-NB2 CVEs in the last year, 2 critical
- tp 3250 firmware1 CVE in the last year
- iot edge linux docker1 CVE in the last year, 1 critical
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.