Vulnerabilities > Advantech > Webaccess Scada > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2018-05-15 | CVE-2018-7501 | SQL Injection vulnerability in Advantech products In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, several SQL injection vulnerabilities have been identified, which may allow an attacker to disclose sensitive information from the host. | 5.0 |
2018-05-15 | CVE-2018-7495 | Path Traversal vulnerability in Advantech products In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an external control of file name or path vulnerability has been identified, which may allow an attacker to delete files. | 6.4 |
2018-05-15 | CVE-2018-10590 | File and Directory Information Exposure vulnerability in Advantech products In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an information exposure vulnerability through directory listing has been identified, which may allow an attacker to find important files that are not normally visible. | 5.0 |
2018-01-25 | CVE-2018-5445 | Path Traversal vulnerability in Advantech Webaccess/Scada A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. | 5.0 |
2018-01-25 | CVE-2018-5443 | SQL Injection vulnerability in Advantech Webaccess/Scada A SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. | 5.0 |