Advantech System Integration services HW/SW

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Advantech product.

RSS Feeds for Advantech security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Advantech products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Advantech Sorted by Most Security Vulnerabilities since 2018

Advantech Webaccess89 vulnerabilities

Advantech Iview33 vulnerabilities

Advantech Webaccessscada29 vulnerabilities

Advantech Webaccess Scada18 vulnerabilities

Advantech Webaccessvpn12 vulnerabilities

Advantech Wise Deviceon Server11 vulnerabilities

Advantech Deviceon Iedge4 vulnerabilities

Advantech Adam 5630 Firmware3 vulnerabilities

Advantech Wise 6610p Dta3 vulnerabilities

Advantech Wise 6610p Dna3 vulnerabilities

Advantech Wise 6610p Dea3 vulnerabilities

Advantech Wise 6610 Tb3 vulnerabilities

Advantech Wise 6610 Nb3 vulnerabilities

Advantech Wise 6610 Jb3 vulnerabilities

Advantech Wise 6610 El Tb3 vulnerabilities

Advantech Wise 6610 El Nb3 vulnerabilities

Advantech Wise 6610 El Jb3 vulnerabilities

Advantech Wise 6610 El Eb3 vulnerabilities

Advantech Wise 6610 El Cb3 vulnerabilities

Advantech Wise 6610 Eb3 vulnerabilities

Advantech Wise 6610 Cb3 vulnerabilities

Advantech Adam 5550 Firmware2 vulnerabilities

Advantech Adam 60521 vulnerability

Advantech Adam 60661 vulnerability

Advantech Adam 65011 vulnerability

Advantech Adam 60151 vulnerability

Advantech Adam 6060w1 vulnerability

Advantech Adam 60601 vulnerability

Advantech Adam 60181 vulnerability

Advantech Adam 6051w1 vulnerability

Advantech Adam 60511 vulnerability

Advantech Adam 6050w1 vulnerability

Advantech Adam 60501 vulnerability

Advantech Adam 60241 vulnerability

Advantech Adam 60221 vulnerability

Advantech Adam 60171 vulnerability

By the Year

In 2026 there have been 55 vulnerabilities in Advantech with an average score of 8.2 out of ten. Last year, in 2025 Advantech had 49 security vulnerabilities published. That is, 6 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 1.82.

Year	Vulnerabilities	Average Score
2026	55	8.15
2025	49	6.33
2024	7	7.10
2023	10	8.84
2022	15	7.90
2021	62	7.32
2020	28	8.45
2019	31	9.23
2018	28	7.18

It may take a day or so for new Advantech vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Advantech Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-43858	Oct 20, 2026	CVE-2026-43858: Remote Auth Stack Overflow Code Exec A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
CVE-2026-43857	Oct 20, 2026	Arbitrary Code Execution via Authenticated Remote Attack on Service A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.
CVE-2026-43856	Oct 20, 2026	Stack buffer overflow in FileProcess::CheckDir enabling remote code exec A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.
CVE-2026-43855	Oct 20, 2026	Heap-based Buffer Overflow Enables Arbitrary Exec in Unknown Product A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
CVE-2026-43854	Oct 20, 2026	EdgeLink Project File Credential Disclosure (CVE-2026-43854) A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.
CVE-2026-43853	Oct 20, 2026	Service Crash via Assertion Fault (CVE-2026-43853) A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.
CVE-2026-43852	Oct 20, 2026	Authenticated File Write Vulnerability (CVE-2026-43852) A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
CVE-2026-43851	Oct 20, 2026	Path Traversal Allowing Authenticated File Read in Unknown System A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
CVE-2026-43850	Oct 20, 2026	Command Injection Enables Root-Level Execution A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.
CVE-2026-43849	Oct 20, 2026	Unspecified Heap Memory Read CVE-2026-43849: Data Exfiltration Risk A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.
CVE-2026-43848	Oct 20, 2026	Unauthenticated Crash via Bulk Port Config on Unknown Network Device A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.
CVE-2026-43847	Oct 20, 2026	Proprietary Protocol BruteForce Admin Password Vulnerability A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.
CVE-2026-43846	Oct 20, 2026	Stack-based Buffer Overflow in Unknown Software Leading to Code Exec A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.
CVE-2026-43845	Oct 20, 2026	Auth Bypass via Password Reset Flaw A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
CVE-2026-43844	Oct 20, 2026	Authentication Bypass via Proprietary Protocol A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.
CVE-2026-43843	Oct 20, 2026	Integer Overflow in License Manager Service Allow Crash (CVE-2026-43843) An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.
CVE-2026-43842	Oct 20, 2026	NULL Pointer Deref in License Manager Service (rpc_rx_fsm) A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.
CVE-2026-43841	Oct 20, 2026	NULL Pointer Deref in License Manager Service (rpc_rx_fsm) A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.
CVE-2026-43840	Oct 20, 2026	Null Pointer Deref in License Manager Service Crash via on_disconnected A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.
CVE-2026-43839	Oct 20, 2026	NULL Ptr Deref in Logs Mgmt Causing Service Crash A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.
CVE-2026-43838	Oct 20, 2026	Stack-based Buffer Overflow in Login Functionality (CVE-2026-43838) A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.
CVE-2026-43837	Oct 20, 2026	Guest Auth Buffer Overflow in Password Verification Allows Code Execution A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.
CVE-2026-43836	Oct 20, 2026	CVE-2026-43836: Packet Forgery RCE with Root Privileges A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.
CVE-2026-43835	Oct 20, 2026	Authenticated Firmware Upgrade Spoof Allows Permanent Device Compromise A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.
CVE-2026-43834	Oct 20, 2026	Stack Buffer Overflow in Log Settings Authenticated Code Exec A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.
CVE-2026-73177	Sep 16, 2026	Advantech EKI-1242EIMS V1.06.01 firmware upgrade signature bypass Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01. The device accepts firmware images through the authenticated web management interface without performing any cryptographic signature or certificate verification. An authenticated administrator-level attacker can install arbitrary modified firmware on the device, enabling full persistent compromise of the platform.
CVE-2026-73176	Sep 16, 2026	Advantech EKI-1242IEIMS V1.06.01 OS Command Injection via Web UI Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.
CVE-2026-73175	Sep 16, 2026	Advantech EKI-1242EIMS V1.06.01 OPC UA Gateway DoS (CWE-400) Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows an adjacent unauthenticated attacker to exhaust the server session pool and cause a complete denial of service to all legitimate OPC UA clients by opening multiple anonymous sessions.
CVE-2026-73174	Sep 16, 2026	Advantech EKI-1242EIMS Cleartext Leak via edgserver (CWE-319) V1.06.01 Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a network-adjacent passive observer to intercept management traffic and recover sensitive device identity and network metadata in cleartext.
CVE-2026-73173	Sep 16, 2026	Advantech EKI-1242EIMS v1.06.01 Remote AuthBypass in edgserver (TCP 5058) Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to invoke critical device-management functions, including network reconfiguration, reboot, reset, and firmware upgrade, by sending crafted requests to TCP port 5058.
CVE-2026-73172	Sep 16, 2026	Advantech EKI-1242EIMS 1.06.01 OS Command Injection via edgserver (port 5058) Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the edgserver management service of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to execute arbitrary OS commands as root via crafted requests to TCP port 5058.
CVE-2026-73171	Sep 16, 2026	CWE-73 Path Traversal in Advantech EKI-1242EIMS V1.06.01 via Web Upload Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to overwrite arbitrary files on the device filesystem by uploading a crafted backup archive through the web management interface.
CVE-2026-73170	Sep 16, 2026	Advantech EKI-1242EIMS v1.06.01 - Lua Code Injection via CSV Import (CWE-94) Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary Lua code on the device via a crafted imported file.
CVE-2026-73169	Sep 16, 2026	Advantech EKI-1242EIMS V1.06.01 XSS in Modbus Tx mgmt interface (CWE79) Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Modbus transaction management interface of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to store malicious script content that executes in the browser of any administrator who later opens an affected management page.
CVE-2026-73167	Sep 16, 2026	Advantech EKI-1242IEIMS 1.06.01 OS Command Injection Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.
CVE-2026-73166	Sep 16, 2026	Advantech EKI-1242IEIMS V1.06.01 Web UI Code Injection (CWE-94) Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS commands as root.
CVE-2026-73165	Sep 16, 2026	Advantech EKI-1242IEIMS V1.06.01 OS Command Injection via Web UI Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.
CVE-2026-73164	Sep 16, 2026	Advantech EKI-1242IEIMS v1.06.01 OS Command Injection via Web UI Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.
CVE-2026-73163	Sep 16, 2026	Advantech EKI-1242IEIMS V1.06.01 OS Command Injection Root Access Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.
CVE-2026-19535	Sep 16, 2026	CVE-2026-19535: CSRF in LuCI Admin UI of Advantech EKI-1242IEIMS Firmware 1.06.01 Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to perform unauthorized state-changing requests on behalf of a logged-in administrator, enabling unauthorized access to privileged management functions.
CVE-2026-79698	Sep 07, 2026	Advantech WISE-6610 Node-RED Lib Cmd Injection (pre-1.2.4) A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251110. This vulnerability affects the function nodered_lib_apply of the component Node-RED Library. Such manipulation of the argument act leads to command injection. The attack can be launched remotely. The exploit is publicly available and might be used. Upgrading to version 1.2.4_20260821 is able to resolve this issue. It is advisable to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.	Wise 6610 Nb Wise 6610 Eb Wise 6610 Tb And others...
CVE-2026-79697	Sep 07, 2026	Advantech WISE-6610 BasicStation Cert Delete Cmd Injection (<1.2.4) A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251110. This affects the function basicstation_apply of the component Basic Station Certificate-Deletion Handler. This manipulation of the argument act causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.2.4_20260821 is able to mitigate this issue. Upgrading the affected component is advised. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.	Wise 6610 Nb Wise 6610 Eb Wise 6610 Tb And others...
CVE-2026-43833	Jul 31, 2026	Authn Stack Buffer Overflow in Upload (CVE-2026-43833) A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution.
CVE-2026-43832	Jul 31, 2026	Stack Buffer Overflow in Cookie Parsing with SafeEnhancement A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled.
CVE-2026-43831	Jul 31, 2026	Unauthenticated Stack BufOverflow in log msg enabling code exec A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution.
CVE-2026-43830	Jul 31, 2026	Firmware Upgrade File Verification Command Injection (CVE-2026-43830) A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands.
CVE-2026-43829	Jul 31, 2026	Unauthenticated Stack-Based Buffer Overflow in SafeEnhancement Password Feature A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled.
CVE-2026-6890	Jul 31, 2026	Default root SSH creds in Advantech ECU-1251D IoT device
CVE-2026-6889	Jul 31, 2026	DNP3 Daemon DoS via Null File on Advantech ECU-1251D
CVE-2026-14162	Jun 30, 2026	Advantech Hospital Queuing Mgmt APIDoc Endpoint Exposes Sensitive Data Hospital Queuing Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access a specific URL to obtain API documentation.