WebAccess is a browser-based software package for human-machine interfaces (HMI) and SCADA systems developed by Advantech. The software is widely adopted in many sectors worldwide, such as critical manufacturing, energy, and water and wastewater. The vulnerabilities were reported to the vendor in January that addressed them with the release of version 8.4.0 of WebAccess. The vulnerability was reported by researchers Mat Powell and Natnael Samson through Trend Micros Zero Day Initiative.”]
Source: https://securityaffairs.co/wordpress/83293/breaking-news/advantech-webaccess-scada-flaws.html