Absolute Directory Traversal Vulnerability in Advantech WebAccess/SCADA
CVE-2025-14848

5.3MEDIUM

Key Information:

Vendor

Advantech
Status
Webaccess/scada
Vendor
CVE Published:
18 December 2025

What is CVE-2025-14848?

Advantech WebAccess/SCADA is susceptible to an absolute directory traversal vulnerability. This flaw could enable an attacker to determine the existence of arbitrary files on the server, posing a significant risk to system integrity. System administrators using Advantech's solution should ensure that security measures are in place to mitigate potential exploitation of this vulnerability.

Affected Version(s)

WebAccess/SCADA 9.2.1

References

https://www.advantech.com/en-us/support/details/installat...
https://www.cisa.gov/news-events/ics-advisories/icsa-25-3...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Alex Wiliams from Pellera Technologies reported these vulnerabilities to CISA.
JSON
.
CVE-2025-14848 : Absolute Directory Traversal Vulnerability in Advantech WebAccess/SCADA