Server Technology PRO3X port_mux listener override root RCE

Authenticated JSON-RPC setConfiguration overrides protolistener program to /bin/sh; TCP connect triggers execv as root. """Server Technology PRO3X portmux listener program override root RCE.""" from future import annotations import json import re import socket from kittysploit import from...

Advantech iView setConfiguration Unauthorized Access

The vulnerability of the setConfiguration component in the Advantech iView network device and port management system is related to the lack of measures taken to protect the SQL query structure during the processing of the ConfigurationServlet. Exploiting this vulnerability allows an attacker,...

CVE-2022-3323: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet endpoint, which listens on TCP port 8080 by default. An unauthenticated remote attacker can craft a special columnvalue parameter in the setConfiguration action to bypass checks...

Advantech iView SQL injection vulnerability

Advantech iView is a Simple Network Protocol SNMP based software from Advantech, China to manage B+B SmartWorx devices. An SQL injection vulnerability exists in Advantech iView version 5.7.04.6469, which stems from a flaw in its ConfigurationServlet endpoint that can be exploited by an attacker t...