Lucene search
K

3 matches found

BDU FSTEC
BDU FSTEC
added 2023/01/16 12:0 a.m.4 views

The vulnerability of the `getUserPrefMenuFragment` component of the Advantech iView network device and port management system allows a malicious individual to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of the getUserPrefMenuFragment component of the Advantech iView network device and port management system is related to an incorrect path name limitation for the restricted access directory during the processing of the MenuServlet. Exploiting this vulnerability could allow a...

10CVSS7.6AI score0.14828EPSS
Exploits0References7Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.24 views

Advantech iView MenuServlet getUserPrefMenuFragment page Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the MenuServlet...

6.5CVSS1.8AI score0.14828EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/16 12:0 a.m.26 views

Advantech iView MenuServlet Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MenuServlet servlet. The issue results from the lack of proper validation of...

7.5CVSS1.5AI score0.04886EPSS
Exploits0References1
Rows per page
Query Builder