Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-14850

Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files.

Published

2025-12-18T21:15:52.900

Last Modified

2025-12-31T19:44:09.080

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.1 (HIGH)

Weaknesses

Type: Primary
CWE-22

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	advantech	webaccess\/scada	9.2.1	Yes

References

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-352-06.json Third Party Advisory ([email protected])
https://www.advantech.com/en-us/support/details/installation?id=1-MS9MJV Product ([email protected])
https://www.cisa.gov/news-events/ics-advisories/icsa-25-352-06 Third Party Advisory, US Government Resource ([email protected])