Unscored CVE-2020-14499 EUVD-2020-6635GHSA-gr25-37rj-jwmm

Advantech iView, versions 5.6 and prior, has an improper access control vulnerability. Successful exploitation of this vulnerability may al…

Published Jul 15, 2020 · Updated Aug 4, 2024 · Assigned by icscert

Description

Advantech iView, versions 5.6 and prior, has an improper access control vulnerability. Successful exploitation of this vulnerability may allow an attacker to obtain all user accounts credentials.

Affected products

Vendor	Product	Affected	Fixed
—	Advantech iView	Versions 5.6 and prior	—

Advisories 1

ICSA-20-196-01 Advantech iView CISA ICS & IT advisories · Jul 14, 2020

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01
https://www.zerodayinitiative.com/advisories/ZDI-20-867/