Lucene search
K

3 matches found

BDU FSTEC
BDU FSTEC
added 2023/01/16 12:0 a.m.3 views

The vulnerability of the setTaskEditorItem component in the centralized network device and port management system Advantech iView allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the setTaskEditorItem component in the Centralized Network Devices and Ports Management System of Advantech iView relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

10CVSS7.3AI score0.10085EPSS
Exploits0References6Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.9 views

Advantech iView setTaskEditorItem DESCRIPTION SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When parsing the...

9.8CVSS4.1AI score0.10085EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.10 views

Advantech iView setTaskEditorItem TASKTYPEDESC SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS2.3AI score0.10085EPSS
Exploits0References1
Rows per page
Query Builder