Vulnerabilities > Advantech

DATE CVE VULNERABILITY TITLE RISK
2023-05-08 CVE-2023-2575 Out-of-bounds Write vulnerability in Advantech products
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated users via a crafted POST request.
network
low complexity
advantech CWE-787
8.8
2022-10-27 CVE-2022-3385 Out-of-bounds Write vulnerability in Advantech R-Seenet
Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow.
network
low complexity
advantech CWE-787
critical
9.8
2022-10-27 CVE-2022-3386 Out-of-bounds Write vulnerability in Advantech R-Seenet
Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow.
network
low complexity
advantech CWE-787
critical
9.8
2022-10-27 CVE-2022-3387 Path Traversal vulnerability in Advantech R-Seenet
Advantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks.
network
low complexity
advantech CWE-22
5.3
2022-09-27 CVE-2022-3323 SQL Injection vulnerability in Advantech Iview 5.7.04.6469
An SQL injection vulnerability in Advantech iView 5.7.04.6469.
network
low complexity
advantech CWE-89
7.5
2022-07-22 CVE-2022-2135 Unspecified vulnerability in Advantech Iview
The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information.
network
low complexity
advantech
7.5
2022-07-22 CVE-2022-2136 Unspecified vulnerability in Advantech Iview
The affected product is vulnerable to multiple SQL injections that require low privileges for exploitation and may allow an unauthorized attacker to disclose information.
network
low complexity
advantech
6.5
2022-07-22 CVE-2022-2137 Unspecified vulnerability in Advantech Iview
The affected product is vulnerable to two SQL injections that require high privileges for exploitation and may allow an unauthorized attacker to disclose information
network
low complexity
advantech
4.9
2022-07-22 CVE-2022-2138 Unspecified vulnerability in Advantech Iview
The affected product is vulnerable due to missing authentication, which may allow an attacker to read or modify sensitive data and execute arbitrary code, resulting in a denial-of-service condition.
network
low complexity
advantech
7.5
2022-07-22 CVE-2022-2139 Path Traversal vulnerability in Advantech Iview
The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary code.
network
low complexity
advantech CWE-22
critical
9.8