CVE-2021-42703: Advantech Webaccess HMI Designer

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

This vulnerability could allow an attacker to send malicious Javascript code resulting in hijacking of the user’s cookie/session tokens, redirecting the user to a malicious webpage, and performing unintended browser action.

Affected products

• Advantech Webaccess HMI Designer: before 2.1.11.0 (fixed in 2.1.11.0)

Published 2021-11-15. Last modified 2026-06-17.