PT-2021-15150

Name of the Vulnerable Software and Affected Versions Advantech iView versions prior to 5.7.03.6112 Description The issue concerns missing authentication in the configuration access of the affected software, potentially allowing an unauthorized attacker to modify the configuration and achieve cod...

PT-2021-15156

Name of the Vulnerable Software and Affected Versions Advantech iView versions prior to v5.7.03.6112 Description The issue is related to a SQL injection that may allow an attacker to escalate privileges to 'Administrator'. Recommendations For versions prior to v5.7.03.6112, update to version...

CVE-2021-22656: Improper Limitation of a Pathname to a Restricted Directory

Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files...

PT-2021-15154

Name of the Vulnerable Software and Affected Versions Advantech iView versions prior to v5.7.03.6112 Description The issue allows an attacker to perform directory traversal, potentially enabling them to read sensitive files. Recommendations For Advantech iView versions prior to v5.7.03.6112, upda...

CVE-2021-22652: Missing Authentication for Critical Function

Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution...

CVE-2021-22658: Improper Neutralization of Special Elements used in an SQL Command

Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Administrator'...

PT-2021-15152

Name of the Vulnerable Software and Affected Versions Advantech iView versions prior to 5.7.03.6112 Description The issue allows an unauthorized attacker to disclose information through SQL injection. It affects the NetworkServlet and UserServlet, potentially allowing information disclosure...

Advantech iView SQL Injection Vulnerability (CNVD-2021-13242)

Advantech iView is a device management application for the energy, water and wastewater industries. A SQL injection vulnerability exists in Advantech iView versions prior to 5.7.03.6112. An attacker can exploit this vulnerability to elevate privileges to "Administrator"...

Advantech iView SQL Injection Vulnerability (CNVD-2021-13243)

Advantech iView is a device management application for the energy, water and wastewater industries. A SQL injection vulnerability exists in versions prior to Advantech iView 5.7.03.6112. An attacker can exploit this vulnerability to disclose information...

Advantech iView Critical Functions Lack Authentication Vulnerability

Advantech iView is a device management application for the energy, water and wastewater industries. A vulnerability exists in Advantech iView prior to version 5.7.03.6112 due to a lack of authentication for critical functions. An attacker could use this vulnerability to make unauthorized changes ...

Advantech iView path traversal vulnerability (CNVD-2021-13241)

Advantech iView is a device management application for the energy, water and wastewater industries. A path traversal vulnerability exists in versions prior to Advantech iView 5.7.03.6112. An attacker can exploit this vulnerability to read sensitive files...

Advantech Iview 路径遍历漏洞

Advantech iView is a device management application for the energy, water and wastewater industries. A path traversal vulnerability exists in versions prior to Advantech iView 5.7.03.6112. An attacker can exploit this vulnerability to read sensitive files...

Advantech Iview SQL注入漏洞

Advantech iView is a device management application for the energy, water and wastewater industries. A SQL injection vulnerability exists in Advantech iView versions prior to 5.7.03.6112. An attacker can exploit this vulnerability to elevate privileges to "Administrator"...

Advantech Iview SQL注入漏洞

Advantech iView is a device management application for the energy, water and wastewater industries. A SQL injection vulnerability exists in versions prior to Advantech iView 5.7.03.6112. An attacker can exploit this vulnerability to disclose information...

Advantech Iview 访问控制错误漏洞

Advantech iView is a device management application for the energy, water and wastewater industries. A vulnerability exists in Advantech iView prior to version 5.7.03.6112 due to a lack of authentication for critical functions. An attacker could use this vulnerability to make unauthorized changes ...

Advantech iView

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: iView Vulnerabilities: SQL Injection, Path Traversal, Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of these vulnerabilities may allow...

Advantech iView Unauthenticated Remote Code Execution

This module exploits an unauthenticated configuration change combined with an unauthenticated file write primitive, leading to an arbitrary file write that allows for remote code execution as the user running iView, which is typically NT AUTHORITY\SYSTEM. This issue was demonstrated in the...

Advantech iView exportTaskMgrReport Directory Traversal (CVE-2020-16245)

A directory traversal vulnerability exists in Advantech iView. The vulnerability is due to improper validation of user-supplied path before using in exportTaskMgrReport method...

SQL Injection Vulnerability in Advantech iView² SNMP Management Software

Advantech is a global leader in the intelligent systems industry. A SQL injection vulnerability exists in Advantech iView² SNMP management software. An attacker can exploit the vulnerability to gain access to sensitive database information...

Information Disclosure Vulnerability in Advantech iView² SNMP Management Software

Advantech is a global leader in the intelligent systems industry. An information disclosure vulnerability exists in Advantech iView² SNMP management software. An attacker can exploit the vulnerability to obtain sensitive data such as user information...