Advantech vulnerabilities
433 vulnerabilities
Known vulnerabilities in Advantech products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 93 products.
Products
50 of 93- Webaccess118 vulnerabilities
- Advantech Webaccess53 vulnerabilities
- R Seenet40 vulnerabilities
- Iview39 vulnerabilities
- Webaccess\/Scada36 vulnerabilities
- ADAM 360031 vulnerabilities
- Eki 6333Ac 1Gpo20 vulnerabilities
- Eki 6333Ac 2G20 vulnerabilities
- Eki 6333Ac 2Gd20 vulnerabilities
- Webaccess\/Nms20 vulnerabilities
- EKI 1242Eims15 vulnerabilities
- EKI 1242Ieims15 vulnerabilities
- Webaccess Scada12 vulnerabilities
- Webaccess\/Hmi Designer12 vulnerabilities
- Webaccess\/Vpn12 vulnerabilities
- Webaccess Dashboard11 vulnerabilities
- Wise Deviceon Server11 vulnerabilities
- Advantech Wireless Sensing And Equipment (Wise)8 vulnerabilities
- Wise 4010Lan8 vulnerabilities
- Wise 4050Lan8 vulnerabilities
- Wise 4060Lan8 vulnerabilities
- Webaccess Hmi Designer6 vulnerabilities
- Deviceon\/Iedge5 vulnerabilities
- Eki 15215 vulnerabilities
- Eki 15225 vulnerabilities
- Eki 15245 vulnerabilities
- Wise Paas\/Rmm5 vulnerabilities
- Adam 56304 vulnerabilities
- Advantech Studio3 vulnerabilities
- Spectre Rt Ert3513 vulnerabilities
- Susiaccess3 vulnerabilities
- WISE 6610 CB3 vulnerabilities
- WISE 6610 EB3 vulnerabilities
- WISE 6610 EL CB3 vulnerabilities
- WISE 6610 EL EB3 vulnerabilities
- WISE 6610 EL JB3 vulnerabilities
- WISE 6610 EL NB3 vulnerabilities
- WISE 6610 EL TB3 vulnerabilities
- WISE 6610 JB3 vulnerabilities
- WISE 6610 NB3 vulnerabilities
- WISE 6610 TB3 vulnerabilities
- WISE 6610P DEA3 vulnerabilities
- WISE 6610P DNA3 vulnerabilities
- WISE 6610P DTA3 vulnerabilities
- Adam 55502 vulnerabilities
- Eki 1321 Series2 vulnerabilities
- Eki 1322 Series2 vulnerabilities
- HMI Designer2 vulnerabilities
- Iot Edge Linux Docker2 vulnerabilities
- Iot Edge Windows2 vulnerabilities
CVE-2026-43856advantechadam-3600
EPSS score0.71%
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.CVE-2026-43855advantechadam-3600EPSS score0.59%
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.CVE-2026-43854advantechadam-3600EPSS score0.10%
A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.CVE-2026-43853advantechadam-3600EPSS score0.43%
A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.CVE-2026-43852advantechadam-3600EPSS score0.47%
A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.CVE-2026-43851advantechadam-3600EPSS score0.47%
A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.CVE-2026-43850advantechadam-3600EPSS score1.31%
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.CVE-2026-43849advantechadam-3600EPSS score0.43%
A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.CVE-2026-43858advantechadam-3600EPSS score0.74%
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.CVE-2026-43857advantechadam-3600EPSS score0.70%
A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.CVE-2026-43835advantechadam-3600EPSS score0.15%
A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.CVE-2026-43834advantechadam-3600EPSS score0.30%
A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.CVE-2026-43840advantechadam-3600EPSS score0.27%
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.CVE-2026-43839advantechadam-3600EPSS score0.27%
A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.CVE-2026-43838advantechadam-3600EPSS score0.31%
A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.CVE-2026-43837advantechadam-3600EPSS score0.37%
A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.CVE-2026-43836advantechadam-3600EPSS score0.62%
A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.CVE-2026-43845advantechadam-3600EPSS score0.34%
A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.CVE-2026-43844advantechadam-3600EPSS score0.41%
A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.CVE-2026-43843advantechadam-3600EPSS score0.27%
An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.