Skip to content
OpenAdvisories
Critical ICSA-21-040-02 4 CVEs

Advantech iView

Published Feb 9, 2021 · Updated Feb 9, 2021

Vendor: Advantech Product: iView

Summary

Successful exploitation of these vulnerabilities may allow an attacker to disclose information, escalate privileges to Administrator, perform an arbitrary file read, and remotely execute commands.

Vulnerabilities 4

  • Unscored —
    CVE-2021-22652 Public exploit EPSS 37%

    Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow …

  • Unscored —
    CVE-2021-22654 EPSS 12%

    Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attac…

  • Unscored —
    CVE-2021-22656

    Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to re…

  • Unscored —
    CVE-2021-22658 EPSS 13%

    Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escala…

Revision history

  1. #1

    ICSA-21-040-02 Advantech iView

References