CVE-2025-67653: Advantech WebAccess/SCADA Path Traversal

Published Dec 18, 2025

Updated

Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence of arbitrary files.

Affected Software

2 affected components

Advantech WebAccess/SCADA

Advantech Webaccess\/scada=9.2.1

Remediation

Information

Advantech recommends users apply the following mitigations and update to WebAccess/SCADA: Version 9.2.2 https://www.advantech.com/en-us/support/details/installation .

Event History

Dec 18, 2025

CVE Published

via MITRE·08:38 PM

Data Sourced

via MITRE·08:38 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-67653?

CVE-2025-67653 is rated as critical due to the potential for directory traversal attacks that could lead to unauthorized file access.

How do I fix CVE-2025-67653?

To fix CVE-2025-67653, users should update to the latest version of Advantech WebAccess/SCADA that addresses this vulnerability.

What impact does CVE-2025-67653 have on system security?

CVE-2025-67653 allows attackers to exploit directory traversal vulnerabilities to access sensitive files, significantly compromising system integrity.

Who is affected by CVE-2025-67653?

CVE-2025-67653 affects all installations of Advantech WebAccess/SCADA that have not applied the appropriate security updates.

Is CVE-2025-67653 related to any other vulnerabilities?

While CVE-2025-67653 is a standalone vulnerability, it may share similarities with other directory traversal issues in different software.