Advantech Webaccess Scada vulnerabilities

12 CVEs affecting Advantech Webaccess Scada, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-38431, published 2021-10-15.

More from Advantech.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-8845, published 2018-05-15. Critical severity, CVSS 9.8. EPSS: 5.6% chance of exploitation in the next 30 days. In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and…
• CVE-2018-10589, published 2018-05-15. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and…
• CVE-2018-7499, published 2018-05-15. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and…
• CVE-2018-7505, published 2018-05-15. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and…
• CVE-2018-7497, published 2018-05-15. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and…
• CVE-2018-7503, published 2018-05-15. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and…
• CVE-2018-7495, published 2018-05-15. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and…
• CVE-2018-10590, published 2018-05-15. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and…
• CVE-2018-7501, published 2018-05-15. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and…
• CVE-2021-38431, published 2021-10-15. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users.

Latest

• CVE-2018-8841, published 2018-05-15. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and…
• CVE-2018-10591, published 2018-05-15. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and…