File and Path Handling

Every one of the 47 is a mark on the map. Named now: 1 to 26, most at risk first.

1. A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within the directory structure of the target device.CVE-2017-16720Advantech · 50% likely

   CWE-22

2. WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to read any file on the filesystem due to a directory traversal vulnerability in the r…CVE-2018-15706Advantech · 32% likely

   CWE-22

3. An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2) control.CVE-2020-10619Advantech · 14% likely

   CWE-23

4. Advantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks. An unauthorized attacker could remotely exploit vulnerable PHP code to delete .PDF files.CVE-2022-3387Advantech · CVSS 6.5 · 14% likely

   CWE-22

5. WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a directory traversal vulnerab…CVE-2018-15705Advantech · 12% likely

   CWE-22

6. Advantech iView, Versions 5.7 and prior. The affected product is vulnerable to path traversal vulnerabilities that could allow an attacker to create/download arbitrary files, limi…CVE-2020-16245Advantech · 7.7% likely

   CWE-22

7. Advantech iView Path TraversalCVE-2025-46704Advantech · CVSS 4.3 · 5.8% likely

   CWE-22

8. Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper validation of a user-supplied path prior to use in file operation…CVE-2019-13551Advantech · 4.9% likely

   CWE-22

9. Advantech iView, versions 5.6 and prior, is vulnerable to multiple path traversal vulnerabilities that could allow an attacker to create/download arbitrary files, limit system ava…CVE-2020-14507Advantech · 4.9% likely

   CWE-22

10. Advantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an attacker to execute arbitrary code.CVE-2018-14806Advantech · 4.8% likely

    CWE-22

11. Directory traversal vulnerability in Advantech WebAccess before 8.1 allows remote attackers to list arbitrary virtual-directory files via unspecified vectors.CVE-2016-0855Advantech · 4.7% likely

    CWE-22

12. An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The directory traversal/file upload error allows an attacker to upload and unpack a zip file.CVE-2016-9351Advantech · 4.5% likely

    CWE-22

13. Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call. An unauthenticated, remote attacker can use this vulnerability to execute arbitrary co…CVE-2019-3940Advantech · 4.1% likely

    CWE-434

14. In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…CVE-2018-10589Advantech · 3.9% likely

    CWE-22

15. A local file inclusion (LFI) vulnerability exists in the options.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). A specially crafted HTTP request can lead to…CVE-2021-21804Advantech · CVSS 8.1 · 3.7% likely

    CWE-98

16. Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow a low privilege user to overwrite files out…CVE-2020-12006Advantech · 3.7% likely

    CWE-23

17. A local file inclusion vulnerability exists in the installation functionality of Advantech WebAccess/SCADA 9.0.1. A specially crafted application can lead to information disclosur…CVE-2020-13550Advantech · CVSS 7.7 · 3.5% likely

    CWE-22

18. Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files vi…CVE-2013-1627Advantech · 3.4% likely

    CWE-22

19. Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files.CVE-2021-22656Advantech · 3.3% likely

    CWE-22

20. In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…CVE-2018-7503Advantech · 2.5% likely

    CWE-22

21. An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A maliciously crafted dll file placed earlier in the search path m…CVE-2017-12717Advantech · 2.4% likely

    CWE-427

22. Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow a low privilege user to overwrite files out…CVE-2020-12026Advantech · 2.3% likely

    CWE-23

23. Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, which may allow an arbitrary file deletion w…CVE-2018-14820Advantech · 2.2% likely

    CWE-73

24. In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…CVE-2018-7495Advantech · 2.1% likely

    CWE-73

25. Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to a directory traversal, which may allow an attacker to remotely read arbitrary files on the file system.CVE-2021-32954Advantech · 2.1% likely

    CWE-23

26. A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. An attacker has read access to files within the directory structure of the targ…CVE-2018-5445Advantech · 1.8% likely

    CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.