Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-14848

Advantech WebAccess/SCADA is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary files.

Published

2025-12-18T21:15:52.587

Last Modified

2025-12-31T19:49:01.333

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses

Type: Primary
CWE-36

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	advantech	webaccess\/scada	9.2.1	Yes

References

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-352-06.json Third Party Advisory ([email protected])
https://www.advantech.com/en-us/support/details/installation?id=1-MS9MJV Product ([email protected])
https://www.cisa.gov/news-events/ics-advisories/icsa-25-352-06 Third Party Advisory, US Government Resource ([email protected])