Description
A vulnerability exists in Advantech iView that could allow for SQL
injection through the CUtils.checkSQLInjection() function. This
vulnerability can be exploited by an authenticated attacker with at
least user-level privileges, potentially leading to information
disclosure or a denial-of-service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Advantech | iView | < 5.7.05 build 7057 | 5.7.05 build 7057 |
Advisories 1
- ICSA-25-191-08 Advantech iView CISA ICS & IT advisories · Jul 10, 2025