Description
A vulnerability exists in Advantech iView in
NetworkServlet.processImportRequest() that could allow for a directory
traversal attack. This issue requires an authenticated attacker with at
least user-level privileges. A specific parameter is not properly
sanitized or normalized, potentially allowing an attacker to determine
the existence of arbitrary files on the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Advantech | iView | < 5.7.05 build 7057 | 5.7.05 build 7057 |
Advisories 1
- ICSA-25-191-08 Advantech iView CISA ICS & IT advisories · Jul 10, 2025