Directory Traversal Vulnerability in Advantech WebAccess/SCADA

CVE-2025-14850

What is CVE-2025-14850?

The Advantech WebAccess/SCADA product is vulnerable to a directory traversal attack, allowing attackers to potentially delete arbitrary files on the server. This vulnerability arises when the application improperly restricts access to file paths, enabling unauthorized users to manipulate the file structure. Consequently, an attacker could exploit this flaw to gain access to sensitive data or disrupt operations by deleting essential files. It is crucial for users of Advantech WebAccess/SCADA to review and update their systems to mitigate this risk efficiently.

References