Advantech: >> Iview >> 5.7.03.6112 Security Vulnerabilities
The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary code.
CVSS Score
6.5
EPSS Score
0.148
Published
2022-07-22
The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attacker to disclose information.
CVSS Score
8.1
EPSS Score
0.008
Published
2022-07-22
The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.
CVSS Score
9.8
EPSS Score
0.592
Published
2022-07-22
The affected product is vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information on the iView (versions prior to v5.7.03.6182).
CVSS Score
7.5
EPSS Score
0.012
Published
2021-06-11
The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and execute arbitrary code on the iView (versions prior to v5.7.03.6182).
CVSS Score
9.8
EPSS Score
0.081
Published
2021-06-11
Page 3