CVE-2021-32943: Advantech Webaccess/scada

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code on the WebAccess/SCADA (WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1).

Affected products

• Advantech Webaccess/scada: before 8.4.5 (fixed in 8.4.5); from 9.0, before 9.0.1 (fixed in 9.0.1)

Published 2021-08-10. Last modified 2026-06-17.