github.com
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-352-06.json CVE-2025-14850
HIGH
Advantech WebAccess/SCADA Improper Limitation of a Pathname to a Restricted Directory
Record summary
CVE-2025-14850 has a selected CVSS score of 7.2 (high).
Description
Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 18, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
WebAccess/SCADABrowse Advantech / WebAccess/SCADADefault status: unaffected | CVE List | 9.2.1 | affected |
References
4nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-14850 advantech.com
https://www.advantech.com/en-us/support/details/installation?id=1-MS9MJV cisa.gov
https://www.cisa.gov/news-events/ics-advisories/icsa-25-352-06