Advantech iView performZTPConfig SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When parsing any...

Advantech iView Path Traversal Vulnerability

Advantech iView is a device management application from Advantech. A path traversal vulnerability exists in the handling of calls to the importZtpConfiguration method in the ZTPConfig class in Advantech iView 5.6 and earlier versions. An attacker can exploit this vulnerability to create or downlo...

Advantech iView ZTPConfig importZtpConfiguration Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the importZtpConfiguration method of the ZTPConfig...