CVE-2021-38431: Advantech Webaccess Scada

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users.

Affected products

• Advantech Webaccess Scada: up to and including 9.0.3

Published 2021-10-15. Last modified 2026-06-17.