CVE-2021-22654

Advantech iView before version 5.7.03.6112 is vulnerable to SQL injection (CVE-2021-22654). The flaw allows an unauthenticated, network-accessing attacker to disclose information via insecure SQL query construction in the UserServlet/NetworkServlet components, per ZDI advisories and CVE records. ...