advantech security advisories
14 threat alerts tracking vulnerabilities and security advisories that affect advantech products.
Vulnios monitors advantech CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent advantech security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2022-50591 — advantech — iview
Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection
criticalCVE-2022-50591Critical Vulnerability: CVE-2022-50593 — advantech — iview
Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection
criticalCVE-2022-50593Critical Vulnerability: CVE-2016-2275 — advantech — vesp211-eu, vesp211-eu_firmware
The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on the client to implement access control, which allows
criticalCVE-2016-2275Critical Vulnerability: CVE-2016-0856 — advantech — webaccess
Multiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors.
criticalCVE-2016-0856Critical Vulnerability: CVE-2016-0854 — advantech — webaccess
Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to w
criticalCVE-2016-0854Critical Vulnerability: CVE-2015-7938 — advantech — eki-1321_series_firmware, eki-1322_series_firmware
Advantech EKI-132x devices with firmware before 2015-12-31 allow remote attackers to bypass authentication via unspecified vectors.
criticalCVE-2015-7938Critical Vulnerability: CVE-2016-0857 — advantech — webaccess
Multiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors.
criticalCVE-2016-0857Critical Vulnerability: CVE-2016-0859 — advantech — webaccess
Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted RPC
criticalCVE-2016-0859Critical Vulnerability: CVE-2017-12698 — advantech — webaccess
An Improper Authentication issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Specially crafted requests allow a possible authentication bypass that could allow remote code e
criticalCVE-2017-12698Critical Vulnerability: CVE-2017-12708 — advantech — webaccess
An Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabili
criticalCVE-2017-12708Critical Vulnerability: CVE-2017-12706 — advantech — webaccess
A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validati
criticalCVE-2017-12706Critical Vulnerability: CVE-2017-5152 — advantech — webaccess
An issue was discovered in Advantech WebAccess Version 8.1. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access pages unrestricted (AUTHENTICAT
criticalCVE-2017-5152Critical Vulnerability: CVE-2017-5154 — advantech — webaccess
An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software. Successful attack
criticalCVE-2017-5154Critical Vulnerability: CVE-2025-34256 — advantech — wise-deviceon_server
Advantech WISE-DeviceOn Server versions prior to 5.4 contain a hard-coded cryptographic key vulnerability. The product uses a static HS512 HMAC secret for signing EIRMMToken JWTs across all installati
criticalCVE-2025-34256
Track advantech exposure across your environment
Vulnios automatically cross-references your asset inventory against new advantech CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan