Vulnerabilities > Advantech > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-01-28 | CVE-2021-40388 | Incorrect Default Permissions vulnerability in Advantech SQ Manager 1.0.6 A privilege escalation vulnerability exists in Advantech SQ Manager Server 1.0.6. | 7.2 |
| 2022-01-28 | CVE-2021-40389 | Incorrect Default Permissions vulnerability in Advantech Deviceon/Iedge 1.0.2 A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iEdge Server 1.0.2. | 7.2 |
| 2022-01-28 | CVE-2021-40396 | Incorrect Default Permissions vulnerability in Advantech Deviceon/Iservice 1.1.7 A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iService 1.1.7. | 7.2 |
| 2021-12-22 | CVE-2021-21910 | Incorrect Default Permissions vulnerability in Advantech R-Seenet 2.4.15 A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). | 7.2 |
| 2021-12-22 | CVE-2021-21911 | Improper Privilege Management vulnerability in Advantech R-Seenet 2.4.15 A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). | 7.2 |
| 2021-12-22 | CVE-2021-21912 | Incorrect Default Permissions vulnerability in Advantech R-Seenet 2.4.15 A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). | 7.8 |
| 2021-12-22 | CVE-2021-21936 | SQL Injection vulnerability in Advantech R-Seenet 2.4.15 A specially-crafted HTTP request can lead to SQL injection. | 8.8 |
| 2021-10-18 | CVE-2021-33023 | Out-of-bounds Write vulnerability in Advantech Webaccess Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code. | 7.5 |
| 2021-10-18 | CVE-2021-38389 | Out-of-bounds Write vulnerability in Advantech Webaccess Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code. | 7.5 |
| 2021-09-09 | CVE-2021-38408 | Stack-based Buffer Overflow vulnerability in Advantech Webaccess A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper validation of the length of user-supplied data may allow remote code execution. | 7.5 |