What’s Vulnerable › Vulnerabilities

CVE-2021-32951: Advantech WebAccess/NMS Improper Authentication

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-10-27 · updated 2026-06-17
• Weakness: CWE-287

Description

WebAccess/NMS (Versions prior to v3.0.3_Build6299) has an improper authentication vulnerability, which may allow unauthorized users to view resources monitored and controlled by the WebAccess/NMS, as well as IP addresses and names of all the devices managed via WebAccess/NMS.

Affected products

• Advantech Webaccess/Nms: through 3.0.3

References

• https://us-cert.cisa.gov/ics/advisories/icsa-21-229-02
• https://us-cert.cisa.gov/ics/advisories/icsa-21-229-02

Get alerted when CVE-2021-32951 or the next vulnerability affects your stack