The vulnerability of the setConfiguration component in the system for centralized control of network devices and ports of the Advantech iView model allows a hacker to gain unauthorized access to protected information.

The vulnerability of the setConfiguration component in the Advantech iView network device and port management system is related to the lack of measures taken to protect the SQL query structure during the processing of the ConfigurationServlet. Exploiting this vulnerability allows an attacker,...

CVE-2022-3323: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet endpoint, which listens on TCP port 8080 by default. An unauthenticated remote attacker can craft a special columnvalue parameter in the setConfiguration action to bypass checks...

Advantech iView SQL注入漏洞

Advantech iView is a Simple Network Protocol SNMP based software from Advantech, China to manage B+B SmartWorx devices. An SQL injection vulnerability exists in Advantech iView version 5.7.04.6469, which stems from a flaw in its ConfigurationServlet endpoint that can be exploited by an attacker t...