CVE-2021-22674: Advantech Webaccess/scada

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

The affected product is vulnerable to a relative path traversal condition, which may allow an attacker access to unauthorized files and directories on the WebAccess/SCADA (WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1).

Affected products

• Advantech Webaccess/scada: before 8.4.5 (fixed in 8.4.5); from 9.0, before 9.0.1 (fixed in 9.0.1)

Published 2021-08-10. Last modified 2026-06-17.