CVE-2019-3975: Advantech Webaccess

Critical severity, CVSS 9.8. EPSS: 4.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.1 allows a remote, unauthenticated attacker to execute arbitrary code via a crafted IOCTL 70603 RPC message.

Affected products

• Advantech Webaccess: version 8.4.1 only

Published 2019-09-10. Last modified 2026-06-17.