Advantech iView SQL Injection (CVE-2022-2135)

A SQL injection vulnerability exists for Advantech iView. This vulnerability is due to improper input validation for the segment parameter in the findCfgDeviceList process...

CVE-2022-2135

creationtimestamp| type| source ---|---|--- 2022-07-22 18:19:27+00:00| seen| https://t.me/cibsecurity/46800...

CVE-2022-2135

CVE-2022-2135 affects Advantech iView. Multiple sources describe a SQL Injection vulnerability in the iView product, notably in the findCfgDeviceList action (segment parameter parsing) through the NetworkServlet endpoint (port 8080). ZDI advisories detail remote attackers being able to exploit by...

CVE-2022-2135 Advantech iView

The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information...