PT-2020-14048

Name of the Vulnerable Software and Affected Versions Advantech iView versions 5.6 and prior Description The issue is related to an improper neutralization of special elements used in a command, also known as a command injection vulnerability. This vulnerability allows an attacker to send an HTTP...

PT-2020-14047

Name of the Vulnerable Software and Affected Versions Advantech iView versions 5.6 and prior Description The issue is related to improper input validation, which could allow an attacker to remotely execute arbitrary code. Successful exploitation of this issue could lead to remote code execution...

CVE-2020-14503: Improper Input Validation

Advantech iView, versions 5.6 and prior, has an improper input validation vulnerability. Successful exploitation of this vulnerability could allow an attacker to remotely execute arbitrary code...

CVE-2020-14499: Improper Access Control

Advantech iView, versions 5.6 and prior, has an improper access control vulnerability. Successful exploitation of this vulnerability may allow an attacker to obtain all user accounts credentials...

CVE-2020-14505: Improper Neutralization of Special Elements used in a Command

Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command “command injection” vulnerability. Successful exploitation of this vulnerability may allow an attacker to send a HTTP GET or POST request that creates a command string without any...

PT-2020-14046

Name of the Vulnerable Software and Affected Versions Advantech iView versions 5.6 and prior Description The issue is related to improper authentication for a critical function, allowing an attacker to obtain user table information, including administrator credentials in plain text. An attacker m...

PT-2020-14050

Name of the Vulnerable Software and Affected Versions Advantech iView versions 5.6 and prior Description The issue allows an attacker to create or download arbitrary files, limit system availability, and remotely execute code due to multiple path traversal vulnerabilities. Recommendations For...