Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WebAccess — Vulnerabilities & Security Advisories 35

All 35 CVE vulnerabilities found in WebAccess, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security advisories and vulnerability reports for WebAccess, a SCADA and HMI software suite developed by Schneider Electric, specifically focusing on remote code execution and authentication bypass weaknesses. The collection encompasses confirmed flaws disclosed between 2014 and the present, drawing from official vendor bulletins, third-party researcher disclosures, and public security databases to provide a comprehensive historical record of the product's security posture. Readers can utilize this resource to track the evolution of Schneider Electric's advisory practices, analyze the prevalence of specific weakness classes such as improper input validation or buffer overflows within industrial control systems, and review the complete vulnerability history of the WebAccess platform for risk assessment and patch management purposes. The data presented here serves as a centralized reference for security professionals, system administrators, and auditors who need to understand the exposure landscape of this critical infrastructure component without navigating fragmented sources. By consolidating these findings, the page facilitates efficient identification of unpatched systems and supports the development of targeted mitigation strategies for industrial environments. All entries are categorized by severity and affected version ranges to assist in prioritizing remediation efforts. This aggregation ensures that stakeholders have immediate access to verified security information regarding WebAccess, enabling informed decision-making for maintaining the integrity and availability of operational technology networks.

Vendor: Advantech

CVE ID Title CVSS Severity Published
CVE-2023-4215 Advantech WebAccess Debug Messages Revealing Unnecessary Information CWE-1295 6.5 Medium 2023-10-16
CVE-2021-38389 Advantech WebAccess CWE-121 9.8 Critical 2021-10-18
CVE-2021-33023 Advantech WebAccess CWE-122 9.8 Critical 2021-10-18
CVE-2019-13558 Advantech WebAccess 代码注入漏洞 CWE-94 9.8 - 2019-09-18
CVE-2019-13556 Advantech WebAccess 缓冲区错误漏洞 CWE-121 8.8 - 2019-09-18
CVE-2019-13552 研华 Advantech WebAccess 命令注入漏洞 CWE-77 8.8 - 2019-09-18
CVE-2019-13550 Advantech WebAccess 授权问题漏洞 CWE-285 8.8 - 2019-09-18
CVE-2019-3941 Advantech WebAccess 访问控制错误漏洞 7.5 - 2019-04-09
CVE-2019-3940 Advantech WebAccess 代码问题漏洞 CWE-434 9.8 - 2019-04-09
CVE-2018-7497 多款Advantech产品安全漏洞 CWE-822 9.8 - 2018-05-15
CVE-2018-10590 多款Advantech产品安全漏洞 CWE-548 7.5 - 2018-05-15
CVE-2018-10591 多款Advantech产品安全漏洞 CWE-346 7.4 - 2018-05-15
CVE-2018-10589 多款Advantech产品路径遍历漏洞 CWE-22 9.8 - 2018-05-15
CVE-2018-8841 多款Advantech产品安全漏洞 CWE-269 8.1 - 2018-05-15
CVE-2018-7495 多款Advantech产品安全漏洞 CWE-73 7.5 - 2018-05-15
CVE-2018-7499 多款Advantech产品缓冲区错误漏洞 CWE-121 9.8 - 2018-05-15
CVE-2018-7501 多款Advantech产品SQL注入漏洞 CWE-89 7.5 - 2018-05-15
CVE-2018-7505 多款Advantech产品权限许可和访问控制漏洞 CWE-264 9.8 - 2018-05-15
CVE-2018-8845 多款Advantech产品缓冲区错误漏洞 CWE-122 9.8 - 2018-05-15
CVE-2018-7503 多款Advantech产品路径遍历漏洞 CWE-22 7.5 - 2018-05-15
CVE-2014-2364 Advantech WebAccess Stack-Based Buffer Overflow CWE-121 9.8 - 2014-07-19
CVE-2014-2365 Advantech WebAccess Improper Access Control CWE-284 8.1 - 2014-07-19
CVE-2014-2366 Advantech WebAccess Cleartext Storage of Sensitive Information in Memory CWE-316 6.5 - 2014-07-19
CVE-2014-2367 Advantech WebAccess Authentication Bypass Issues CWE-592 7.5 - 2014-07-19
CVE-2014-2368 Advantech WebAccess Unsafe ActiveX Control Marked Safe For Scripting CWE-623 7.5 - 2014-07-19
CVE-2014-0763 Advantech WebAccess SQL Injection CWE-89 9.8 - 2014-04-12
CVE-2014-0764 Advantech WebAccess Stack-based Buffer Overflow CWE-121 9.8 - 2014-04-12
CVE-2014-0765 Advantech WebAccess Stack-based Buffer Overflow CWE-121 9.8 - 2014-04-12
CVE-2014-0766 Advantech WebAccess Stack-based Buffer Overflow CWE-121 9.8 - 2014-04-12
CVE-2014-0767 Advantech WebAccess Stack-based Buffer Overflow CWE-121 9.8 - 2014-04-12

All 35 known CVE vulnerabilities affecting WebAccess with full Chinese analysis, references, and POCs where available.