Advantech iView Command Injection (CVE-2022-2143)

A command injection vulnerability exists for Advantech iView. This vulnerability is due to improper input validation of the backupfilename parameter while updating NetworkServlet database...

Metasploit Wrap-Up

Advantech iView NetworkServlet Command Injection This week Shelby Pace has developed a new exploit module for CVE-2022-2143. This module uses an unauthenticated command injection vulnerability to gain remote code execution against vulnerable versions of Advantech iView software below 5.7.04.6469...

Advantech iView runProViewUpgrade fwfilename Command Injection (CVE-2022-2143)

Binary data scadaadvantechiviewcve-2022-2143.nbin...

CVE-2022-2143

creationtimestamp| type| source ---|---|--- 2022-07-22 18:19:31+00:00| seen| https://t.me/cibsecurity/46803 2022-08-18 15:41:42+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/advantechiviewnetworkservletcmdinject.rb 2025-02-06 03:13:45+00:00|...

CVE-2022-2143 Advantech iView

The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2022-2143 Advantech iView

The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2022-2143

CVE-2022-2143 affects Advantech iView (NetworkServlet) and is caused by improper input validation of a parameter used in backup/file operations, enabling command injection. Affected products are Advantech iView versions prior to 5_7_04_6469. This vulnerability may allow remote code execution via ...