Skip to content
OpenAdvisories
Critical ICSA-20-196-01 6 CVEs

Advantech iView

Published Jul 14, 2020 · Updated Jul 14, 2020

Vendor: Advantech Product: iView

Summary

Successful exploitation of these vulnerabilities could allow an attacker to read/modify information, execute arbitrary code, limit system availability, and/or crash the application.

Vulnerabilities 6

  • Unscored —
    CVE-2020-14497

    Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use…

  • Unscored —
    CVE-2020-14499

    Advantech iView, versions 5.6 and prior, has an improper access control vulnerability. Successful exploitation of this …

  • Unscored —
    CVE-2020-14501

    Advantech iView, versions 5.6 and prior, has an improper authentication for critical function (CWE-306) issue. Successf…

  • Unscored —
    CVE-2020-14503

    Advantech iView, versions 5.6 and prior, has an improper input validation vulnerability. Successful exploitation of thi…

  • Unscored —
    CVE-2020-14505

    Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command (“command…

  • Unscored —
    CVE-2020-14507

    Advantech iView, versions 5.6 and prior, is vulnerable to multiple path traversal vulnerabilities that could allow an a…

Revision history

  1. #1

    ICSA-20-196-01 Advantech iView

References