CVE-2020-10638: Advantech Webaccess

Critical severity, CVSS 9.8. EPSS: 7.1% chance of exploitation in the next 30 days.

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple heap-based buffer overflow vulnerabilities exist caused by a lack of proper validation of the length of user-supplied data, which may allow remote code execution.

Affected products

• Advantech Webaccess: up to and including 8.4.4; version 9.0.0 only

Published 2020-05-08. Last modified 2026-06-17.