Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WebAccess/SCADA — Vulnerabilities & Security Advisories 25

All 25 CVE vulnerabilities found in WebAccess/SCADA, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses affecting the WebAccess/SCADA industrial control system developed by Wonderware, specifically focusing on remote code execution and authentication bypass vulnerabilities within the Schneider Electric product ecosystem. The collection encompasses critical flaws identified between 2015 and 2024, drawing data from official vendor advisories, public security research disclosures, and coordinated vulnerability response reports to provide a comprehensive historical record. Users can utilize this resource to track the evolution of vendor security advisories over time, analyze the prevalence of specific weakness classes like buffer overflows or insecure defaults in SCADA environments, and review the complete vulnerability history for this particular software suite to assess legacy risk exposure. The data serves as a factual reference for security professionals conducting risk assessments, enabling them to correlate specific product versions with reported exploits without relying on fragmented sources. By centralizing these findings, the page facilitates efficient remediation planning and supports the development of robust defense-in-depth strategies for operational technology networks. All entries are verified against authoritative databases to ensure accuracy and relevance for industrial cybersecurity practitioners monitoring the threat landscape surrounding Wonderware solutions.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2025-67653 Advantech WebAccess/SCADA Path Traversal CWE-22 4.3 Medium 2025-12-18
CVE-2025-46268 Advantech WebAccess/SCADA SQL Injection CWE-89 6.3 Medium 2025-12-18
CVE-2025-14848 Advantech WebAccess/SCADA Absolute Path Traversal CWE-36 4.3 Medium 2025-12-18
CVE-2025-14849 Advantech WebAccess/SCADA Unrestricted Upload of File with Dangerous Type CWE-434 8.8 High 2025-12-18
CVE-2025-14850 Advantech WebAccess/SCADA Improper Limitation of a Pathname to a Restricted Directory CWE-22 8.1 High 2025-12-18
CVE-2024-2453 Advantech WebAccess/SCADA SQL Injection CWE-89 6.4 Medium 2024-03-21
CVE-2023-1437 CVE-2023-1437 CWE-822 9.8 Critical 2023-08-02
CVE-2023-2866 Advantech WebAccess Insufficient Type Distinction CWE-351 7.3 High 2023-06-07
CVE-2023-22450 Advantech WebAccess/SCADA 代码问题漏洞 CWE-434 7.2 High 2023-06-05
CVE-2023-32540 Advantech WebAccess/SCADA 代码注入漏洞 CWE-94 7.2 High 2023-06-05
CVE-2023-32628 Advantech WebAccess/SCADA 代码问题漏洞 CWE-434 7.2 High 2023-06-05
CVE-2021-32943 Advantech WebAccess/SCADA 缓冲区错误漏洞 CWE-121 9.8 - 2021-08-10
CVE-2021-22676 Advantech WebAccess/SCADA 跨站脚本漏洞 CWE-79 6.1 - 2021-08-10
CVE-2021-22674 Advantech WebAccess/SCADA 路径遍历漏洞 CWE-23 6.5 - 2021-08-10
CVE-2019-3975 Advantech WebAccess/SCADA 缓冲区错误漏洞 9.8 - 2019-09-10
CVE-2019-10993 研华 Advantech WebAccess/SCADA 缓冲区错误漏洞 9.8 - 2019-06-28
CVE-2019-10987 Advantech WebAccess/SCADA 缓冲区错误漏洞 8.8 - 2019-06-28
CVE-2019-10983 Advantech WebAccess/SCADA 缓冲区错误漏洞 7.5 - 2019-06-28
CVE-2019-10989 Advantech WebAccess/SCADA 缓冲区错误漏洞 9.8 - 2019-06-28
CVE-2019-10991 Advantech WebAccess/SCADA 缓冲区错误漏洞 9.8 - 2019-06-28
CVE-2019-10985 Advantech WebAccess/SCADA 路径遍历漏洞 9.1 - 2019-06-28
CVE-2019-6554 Advantech WebAccess/SCADA 访问控制错误漏洞 CWE-284 7.5 - 2019-04-05
CVE-2019-6550 Advantech WebAccess/SCADA 缓冲区错误漏洞 CWE-121 9.8 - 2019-04-05
CVE-2019-6552 Advantech WebAccess/SCADA 命令操作系统命令注入漏洞 CWE-77 9.8 - 2019-04-05
CVE-2018-18999 Advantech WebAccess/SCADA 缓冲区错误漏洞 CWE-20 7.6 - 2018-12-19

All 25 known CVE vulnerabilities affecting WebAccess/SCADA with full Chinese analysis, references, and POCs where available.