Sql injection

Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Administrator'...

CVE-2021-22656

Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files...

Directory traversal

Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files...

CVE-2021-22652

Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution...

CVE-2021-22658

Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Administrator'...

CVE-2021-22654

Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information...

Sql injection

Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information...

CVE-2021-22652

CVE-2021-22652 concerns Advantech iView prior to v5.7.03.6112. A missing authentication vulnerability on configuration access may allow an unauthenticated attacker to modify settings and achieve code execution. Public sources in the connected set corroborate an unauthenticated remote code executi...

CVE-2021-22652

Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution...

CVE-2021-22656

Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files...

CVE-2021-22656

Advantech iView vulnerable in versions prior to 5.7.03.6112 due to a directory traversal flaw in the CommandServlet class caused by improper validation of a user-supplied path, potentially allowing an attacker to read sensitive files. Remediation: upgrade to iView 5.7.03.6112 or later. Public adv...

CVE-2021-22658

Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Administrator'...

CVE-2021-22658

Advantech iView is affected by CVE-2021-22658 (SQL Injection) on versions prior to 5.7.03.6112. The vulnerability arises in UserServlet processing, enabling an attacker to escalate to Administrator. Multiple connected sources confirm the issue and link it to privilege escalation via unsafely cons...

CVE-2021-22654

Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information...

CVE-2021-22654

Advantech iView before version 5.7.03.6112 is vulnerable to SQL injection (CVE-2021-22654). The flaw allows an unauthenticated, network-accessing attacker to disclose information via insecure SQL query construction in the UserServlet/NetworkServlet components, per ZDI advisories and CVE records. ...

PT-2021-15156

Name of the Vulnerable Software and Affected Versions Advantech iView versions prior to v5.7.03.6112 Description The issue is related to a SQL injection that may allow an attacker to escalate privileges to 'Administrator'. Recommendations For versions prior to v5.7.03.6112, update to version...

PT-2021-15154

Name of the Vulnerable Software and Affected Versions Advantech iView versions prior to v5.7.03.6112 Description The issue allows an attacker to perform directory traversal, potentially enabling them to read sensitive files. Recommendations For Advantech iView versions prior to v5.7.03.6112, upda...

PT-2021-15152

Name of the Vulnerable Software and Affected Versions Advantech iView versions prior to 5.7.03.6112 Description The issue allows an unauthorized attacker to disclose information through SQL injection. It affects the NetworkServlet and UserServlet, potentially allowing information disclosure...

CVE-2021-22656: Improper Limitation of a Pathname to a Restricted Directory

Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files...

CVE-2021-22654: Improper Neutralization of Special Elements used in an SQL Command

Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information...