Threats Tagged 'cve-2025-14849'

CVE-2025-14849 is a high-severity vulnerability in Advantech WebAccess/SCADA version 9.2.1 that allows unrestricted file upload, enabling remote attackers with low privileges to execute arbitrary code without user interaction. This vulnerability arises from improper validation of uploaded files (CWE-434), potentially compromising confidentiality, integrity, and availability of affected systems. Although no known exploits are currently reported in the wild, the vulnerability's characteristics make it a significant risk for industrial control systems relying on this SCADA platform. European organizations operating critical infrastructure using Advantech WebAccess/SCADA are at risk, especially in countries with high adoption of industrial automation and manufacturing sectors. Mitigation requires immediate application of vendor patches once available, strict network segmentation, and enhanced monitoring of file upload functionalities. Countries such as Germany, France, Italy, and the UK are likely most affected due to their industrial base and use of such SCADA systems. Given the ease of exploitation over the network with low privileges and no user interaction, the threat severity is high.

HighVulnerabilityGermanyFranceItaly+5#cve#cve-2025-14849#cwe-434