PT-2025-52334 · Advantech · Webaccess/Scada

Alex Wiliams · Published 2025-12-05 · Updated 2025-12-19 · CVE-2025-14848

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA (affected versions not specified)

Description Advantech WebAccess/SCADA is susceptible to an absolute directory traversal issue. This flaw could allow an attacker to identify the existence of arbitrary files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-36

Related Identifiers

BDU:2025-16466

CVE-2025-14848

Affected Products

Webaccess/Scada

References · 7

• https://osv.dev/vulnerability/CVE-2025-14848 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14848 · Security Note
• https://bdu.fstec.ru/vul/2025-16466 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-352-06.json · Note
• https://twitter.com/CVEnew/status/2002104288143679583 · Twitter Post
• https://advantech.com/en-us/support/details/installation?id=1-MS9MJV · Note
• https://cisa.gov/news-events/ics-advisories/icsa-25-352-06 · Note