Advantech iView SQL注入漏洞

Advantech iView is a software developed by Advantech for managing B+BSmartWorx series devices through a simple network management protocol. Advantech iView suffers from a SQL injection vulnerability that originates from the application's lack of validation of externally entered SQL statements. An...

CVE-2023-3983

Advantech iView vulnerable to an authenticated SQL injection via bypass of com.imc.iview.utils.CUtils.checkSQLInjection() in versions prior to v5.7.4 build 6752. The issue enables blind SQL injection by an authenticated attacker with low privileges and no user interaction, potentially compromisin...

CVE-2023-33335

Cross Site Scripting XSS in Sophos Sophos iView The EOL was December 31st 2020 in grpname parameter that allows arbitrary script to be executed...

CVE-2023-33335

Cross Site Scripting XSS in Sophos Sophos iView The EOL was December 31st 2020 in grpname parameter that allows arbitrary script to be executed...

Cross site scripting

Cross Site Scripting XSS in Sophos Sophos iView The EOL was December 31st 2020 in grpname parameter that allows arbitrary script to be executed...

Sophos iView 跨站脚本漏洞

Sophos iView is a solution from Sophos UK. A security vulnerability exists in Sophos iView that stems from the presence of cross-site scripting XSS, which allows the execution of arbitrary scripts...

CVE-2023-33335

Cross Site Scripting XSS in Sophos Sophos iView The EOL was December 31st 2020 in grpname parameter that allows arbitrary script to be executed...

CVE-2023-33335

CVE-2023-33335 affects Sophos iView via XSS in the grpname parameter. The vulnerability is described as enabling arbitrary script execution. CVSS v3.1 base score 6.1 (Medium) with network attack vector, user interaction required, and changed scope. iView is noted as EOL (Dec 31, 2020). The provid...

CVE-2023-33335

Cross Site Scripting XSS in Sophos Sophos iView The EOL was December 31st 2020 in grpname parameter that allows arbitrary script to be executed...

PT-2023-24303 · Sophos · Sophos Iview

Name of the Vulnerable Software and Affected Versions: Sophos Sophos iView affected versions not specified Description: The issue is related to Cross Site Scripting XSS that allows arbitrary script to be executed. This is specifically due to a problem in the grpname parameter. There is no...

The vulnerability of the centralized control system for network devices and ports of Advantech iView arises from the lack of protective measures for the SQL query structure, allowing attackers to disclose protected information.

The vulnerability of the centralized control system for network devices and ports of Advantech iView relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of the centralized control system for network devices and ports of Advantech iView arises from the lack of protective measures for the SQL query structure, allowing attackers to disclose protected information.

The vulnerability of the centralized control system for network devices and ports of Advantech iView relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of the centralized control system for network devices and ports of Advantech iView, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL commands.

The vulnerability of the centralized control system for network devices and ports of Advantech iView relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

The vulnerability of the centralized control system for network devices and ports of Advantech iView, related to the absence of authentication procedures, allows a perpetrator to execute arbitrary codes or cause service failures.

The vulnerability of the centralized control system for network devices and ports of Advantech iView lies in the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger service failures remotely...

The vulnerability of the setConfiguration component in the system for centralized control of network devices and ports of the Advantech iView model allows a hacker to gain unauthorized access to protected information.

The vulnerability of the setConfiguration component in the Advantech iView network device and port management system is related to the lack of measures taken to protect the SQL query structure during the processing of the ConfigurationServlet. Exploiting this vulnerability allows an attacker,...

The vulnerability of the setTaskEditorItem component in the centralized network device and port management system Advantech iView allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the setTaskEditorItem component in the Centralized Network Devices and Ports Management System of Advantech iView relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

The vulnerability of the `getUserPrefMenuFragment` component of the Advantech iView network device and port management system allows a malicious individual to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of the getUserPrefMenuFragment component of the Advantech iView network device and port management system is related to an incorrect path name limitation for the restricted access directory during the processing of the MenuServlet. Exploiting this vulnerability could allow a...

Advantech iView ConfigurationServlet SQLi (CVE-2022-3323)

Binary data scadaadvantechiviewcve-2022-3323.nbin...

CISA Releases Three Industrial Control Advisories

CISA has released three 3 Industrial Control Systems ICS advisories on 08 December 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories f...

Advantech iView

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Advantech Equipment: iView Vulnerability: SQL Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to acquire credentials. 3...