In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0...

6.1 CVSS

Vulnerability Description

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an origin validation error vulnerability has been identified, which may allow an attacker can create a malicious web site, steal session cookies, and access data of authenticated users.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-10591

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Advantech

View All →

CVE-2025-67653

Advantech WebAccess/SCADA Path Traversal

Medium 5.3

CVE-2025-64302

Advantech DeviceOn/iEdge Cross-site Scripting

Medium 5.3

CVE-2025-62630

Advantech DeviceOn/iEdge Path Traversal

High 8.7

CVE-2025-59171

Advantech DeviceOn/iEdge Path Traversal

High 8.7

CVE-2025-58423

Advantech DeviceOn/iEdge Path Traversal

High 8.7

Affected Vendor

Advantech

View all reports →

Affected Software

WebAccess

Vulnerable Versions:

WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, WebAccess/NMS 2.0.3 and prior.