CVE-2021-22654

Advantech iView before version 5.7.03.6112 is vulnerable to SQL injection (CVE-2021-22654). The flaw allows an unauthenticated, network-accessing attacker to disclose information via insecure SQL query construction in the UserServlet/NetworkServlet components, per ZDI advisories and CVE records. ...

CVE-2021-22654

Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information...

PT-2021-15152

Name of the Vulnerable Software and Affected Versions Advantech iView versions prior to 5.7.03.6112 Description The issue allows an unauthorized attacker to disclose information through SQL injection. It affects the NetworkServlet and UserServlet, potentially allowing information disclosure...

PT-2021-15154

Name of the Vulnerable Software and Affected Versions Advantech iView versions prior to v5.7.03.6112 Description The issue allows an attacker to perform directory traversal, potentially enabling them to read sensitive files. Recommendations For Advantech iView versions prior to v5.7.03.6112, upda...

Advantech iView CommandServlet Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CommandServlet class. The issue results from the lack of proper validation o...

Advantech iView NetworkServlet ztp_config_name SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet class. When parsing the ztpconfigname parameter, the process...

Advantech iView UserServlet SQL Injection Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Advantech iView. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the UserServlet class. The issu...

Advantech iView UserServlet SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UserServlet class. The issue results from the lack of proper validation of a...

PT-2021-15156

Name of the Vulnerable Software and Affected Versions Advantech iView versions prior to v5.7.03.6112 Description The issue is related to a SQL injection that may allow an attacker to escalate privileges to 'Administrator'. Recommendations For versions prior to v5.7.03.6112, update to version...

CVE-2021-22656: Improper Limitation of a Pathname to a Restricted Directory

Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files...

CVE-2021-22658: Improper Neutralization of Special Elements used in an SQL Command

Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Administrator'...

PT-2021-15150

Name of the Vulnerable Software and Affected Versions Advantech iView versions prior to 5.7.03.6112 Description The issue concerns missing authentication in the configuration access of the affected software, potentially allowing an unauthorized attacker to modify the configuration and achieve cod...

CVE-2021-22654: Improper Neutralization of Special Elements used in an SQL Command

Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information...

CVE-2021-22652: Missing Authentication for Critical Function

Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution...

Advantech iView path traversal vulnerability (CNVD-2021-13241)

Advantech iView is a device management application for the energy, water and wastewater industries. A path traversal vulnerability exists in versions prior to Advantech iView 5.7.03.6112. An attacker can exploit this vulnerability to read sensitive files...

Advantech iView Critical Functions Lack Authentication Vulnerability

Advantech iView is a device management application for the energy, water and wastewater industries. A vulnerability exists in Advantech iView prior to version 5.7.03.6112 due to a lack of authentication for critical functions. An attacker could use this vulnerability to make unauthorized changes ...

Advantech iView SQL Injection Vulnerability (CNVD-2021-13243)

Advantech iView is a device management application for the energy, water and wastewater industries. A SQL injection vulnerability exists in versions prior to Advantech iView 5.7.03.6112. An attacker can exploit this vulnerability to disclose information...

Advantech iView SQL Injection Vulnerability (CNVD-2021-13242)

Advantech iView is a device management application for the energy, water and wastewater industries. A SQL injection vulnerability exists in Advantech iView versions prior to 5.7.03.6112. An attacker can exploit this vulnerability to elevate privileges to "Administrator"...

Advantech Iview 访问控制错误漏洞

Advantech iView is a device management application for the energy, water and wastewater industries. A vulnerability exists in Advantech iView prior to version 5.7.03.6112 due to a lack of authentication for critical functions. An attacker could use this vulnerability to make unauthorized changes ...

Advantech Iview 路径遍历漏洞

Advantech iView is a device management application for the energy, water and wastewater industries. A path traversal vulnerability exists in versions prior to Advantech iView 5.7.03.6112. An attacker can exploit this vulnerability to read sensitive files...