Advantech vulnerabilities
We track 82 vulnerabilities in Advantech products across 54 products. 82 are rated high or critical, and none are known to be exploited. The most recent was published on October 20, 2026.
Latest Advantech vulnerabilities
- 8.6 High severity
ADAM-3600: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.
- 8.2 High severity
ADAM-3600: Improper Restriction of Excessive Authentication Attempts
A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.
- 7.5 High severity
ADAM-3600: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.
- 8.6 High severity
ADAM-3600: Insufficient Verification of Data Authenticity
A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.
- 8.6 High severity
EKI-1242IEIMS: Insufficient Verification of Data Authenticity
Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01. The device accepts firmware images through the authenticated w
- 8.6 High severity
EKI-1242IEIMS: Improper Neutralization of Special Elements used in an OS Command
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote auth
- 7.1 High severity
EKI-1242IEIMS: Uncontrolled Resource Consumption
Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows an adjacent unauthenticated attacker to exhaust the server session poo
- 8.7 High severity
EKI-1242IEIMS: Cleartext Transmission of Sensitive Information
Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a network-adjacent passive observer to intercept ma
- 8.8 High severity
EKI-1242IEIMS: Missing Authentication for Critical Functionality
Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to invoke critical d
- 9.3 Critical severity
EKI-1242IEIMS: Improper Neutralization of Special Elements used in an OS Command
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the edgserver management service of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote u
- 8.6 High severity
EKI-1242IEIMS: External Control of File Name or Path
Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to overwrite arbitrary files on the
- 8.6 High severity
EKI-1242IEIMS: Improper Control of Generation of Code
Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute ar
- 8.6 High severity
EKI-1242IEIMS: Improper Neutralization of Special Elements used in an OS Command
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote auth
- 8.6 High severity
EKI-1242IEIMS: Improper Control of Generation of Code
Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arb
- 8.6 High severity
EKI-1242IEIMS: Improper Neutralization of Special Elements used in an OS Command
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote auth
- 8.6 High severity
EKI-1242IEIMS: Improper Neutralization of Special Elements used in an OS Command
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote auth
- 8.6 High severity
EKI-1242IEIMS: Improper Neutralization of Special Elements used in an OS Command
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote auth
- 8.6 High severity
EKI-1242IEIMS: Cross-Site Request Forgery
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to perform unauthorized st
- 9.9 Critical severity
WISE-6610-NB: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251
- 9.9 Critical severity
WISE-6610-NB: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251
- 9.2 Critical severity
ADAM-3600: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled.
- 9.2 Critical severity
ADAM-3600: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled.
- 9.8 Critical severity
Hospital Quering Management: Missing Authentication for Critical Functionality
Hospital Queuing Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access a specific URL to obtain API documentation.
- 7.5 High severity
Hospital Queuing Management: Exposure of Sensitive Information to an Unauthorized Actor
Hospital Quening Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access a specific URL to obtain API documentation.
- 7.2 High severity
SaaS Composer: Improper Neutralization of Special Elements used in an SQL Command
Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitrary commands via a specific interface, potentially enabling the attacker to access, modify, or delete sensitive information within the datab
- 7.2 High severity
WISE-6610-NB: Improper Neutralization of Special Elements used in a Command
A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251
- 9.8 Critical severity
IoTSuite and IoT Edge Products: Improper Neutralization of Special Elements used in an SQL Command
Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet, potentially affecting data confidentiality, integrity, and
- 7.8 High severity
SUSI: Improper Privilege Management
An Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary memory, I/O ports, and MSRs, resulting in privilege escalation, arbitrary code execution, and information disclosure. This issue affects Advan
- 9.8 Critical severity
WISE-DeviceOn Server: Use of Hard-coded Cryptographic Key
Advantech WISE-DeviceOn Server versions prior to 5.4 contain a hard-coded cryptographic key vulnerability. The product uses a static HS512 HMAC secret for signing EIRMMToken JWTs across all installations. The server accepts forged JWTs that need only contain a
- 7.5 High severity
iView: Improper Neutralization of Special Elements used in an SQL Command
Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap (Port 162) requests, which could allow an attacker to inject SQL commands.
- 9.8 Critical severity
DeviceOn/iEdge: Improper Limitation of a Pathname to a Restricted Directory
Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions.
- 9.8 Critical severity
DeviceOn/iEdge: Improper Limitation of a Pathname to a Restricted Directory
Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions.
- 8.8 High severity
DeviceOn/iEdge: Improper Limitation of a Pathname to a Restricted Directory
Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to cause a denial-of-service condition, traverse directories, or read/write files, within the context of the local system account.
- 7.2 High severity
WebAccess/VPN: Improper Neutralization of Special Elements used in an OS Command
Advantech WebAccess/VPN versions prior to 1.1.5 contain a command injection vulnerability in AppManagementController.appUpgradeAction() that allows an authenticated system administrator to execute arbitrary commands as the web server user (www-data) by supplyi
- 7.2 High severity
iView: Improper Neutralization of Special Elements used in an SQL Command
Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘ztp_search_value’ parameter to the
- 7.5 High severity
iView: Improper Neutralization of Special Elements used in an SQL Command
Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘data’ parameter to the ‘NetworkSer
- 9.8 Critical severity
iView: Improper Neutralization of Special Elements used in an SQL Command
Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘search_term’ parameter to the ‘Net
- 7.2 High severity
iView: Improper Neutralization of Special Elements used in an SQL Command
Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘getInventoryReportData’ parameter
- 9.8 Critical severity
iView: Improper Neutralization of Special Elements used in an SQL Command
Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘ztp_config_id’ parameter to the ‘N
- 8.8 High severity
iView: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability exists in Advantech iView that allows for SQL injection and remote code execution through NetworkServlet.archiveTrap(). This issue requires an authenticated attacker with at least user-level privileges. Certain input parameters are not sanitize