CVE-2019-13550

9.8 criticalEPSS 2.8%

Critical (9.8) in advantech webaccess. EPSS 2.8% chance of exploitation in the next 30 days.

In WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an attacker to disclose sensitive information, cause improper control of generation of code, which may allow remote code execution or cause a system crash.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-285
Published: 2019-09-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

advantech:webaccess

References

https://www.us-cert.gov/ics/advisories/icsa-19-260-01
https://www.us-cert.gov/ics/advisories/icsa-19-260-01

Check your stack JSON