CVE-2025-14849

Description

References

• cisagov/CSAF · Third Party Advisory
• advantech.com/en-us/support/details/installation · Product
• cisa.gov/news-events/ics-advisories/icsa-25-352-06 · Third Party Advisory

webaccess/scada 的其他漏洞

• CVE-2025-67653高危 7.5Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence of arbitrary files.
• CVE-2025-46268高危 8.8Advantech WebAccess/SCADA  is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands.
• CVE-2025-14850严重 9.1Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files.
• CVE-2025-14848中危 5.3Advantech WebAccess/SCADA is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary…
• CVE-2023-1437严重 9.8All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent coul…