HIGHCVSS 8.8Vulnerability

CVE-2025-14849

Advantech WebAccess/SCADA  is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code.

Properties

Severity
HIGH
Epss score
0.00618
Cvss severity
HIGH
Cvss score
8.8
Retrieved at
2026-10-21T01:24:47+00:00
Last source
FIRST EPSS
Score
8.8
Cve id
CVE-2025-14849
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
First seen by Signal
2026-09-30T23:56:59+00:00
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published at
2025-12-18T21:15:52.743
Last modified
2026-09-30T23:10:00.237
Epss percentile
0.4869

Related Entities (2)

AFFECTS_PRODUCT (1)

→[Product]cpe:2.3:a:advantech:webaccess\/scada:9.2.1:*:*:*:*:*:*:*

HAS_WEAKNESS (1)

→[Weakness]Unrestricted Upload of File with Dangerous Type

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2025-14849 (CVSS 8.8) — Ninja Signal Threat Intelligence | Ninja Signal