VULNERABILITY INTELLIGENCE

CVE-2021-38431

CVSS score4.3 MEDIUM

EPSS probability0.70%

CISA KEVNot currently listed

Published2021-10-15

Last modified2026-06-17

Description

An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users.