CVE-2025-14848

Description

References

• cisagov/CSAF · Third Party Advisory
• advantech.com/en-us/support/details/installation · Product
• cisa.gov/news-events/ics-advisories/icsa-25-352-06 · Third Party Advisory

Autres vulnérabilités de webaccess/scada

• CVE-2025-67653ÉLEVÉE 7.5Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence of arbitrary files.
• CVE-2025-46268ÉLEVÉE 8.8Advantech WebAccess/SCADA  is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands.
• CVE-2025-14850CRITIQUE 9.1Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files.
• CVE-2025-14849CRITIQUE 9.8Advantech WebAccess/SCADA  is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code.
• CVE-2023-1437CRITIQUE 9.8All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent coul…