Not rated
CVE-2020-14505 Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command…
Description
Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command (“command injection”) vulnerability. Successful exploitation of this vulnerability may allow an attacker to send a HTTP GET or POST request that creates a command string without any validation. The attacker may then remotely execute code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Advantech iView | Versions not published |
References
- us-cert.cisa.gov us-cert.cisa.gov
- www.zerodayinitiative.com www.zerodayinitiative.com
Timeline
- Published
- Last modified
Other CVEs of Advantech iView
The 13 CVEs of Advantech iView →
CVE-2023-3983
An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752
Not rated
CVE-2022-3323
An SQL injection vulnerability in Advantech iView 5.7.04.6469
7.5
High
CVE-2021-22652
Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow…
Not rated
CVE-2021-22656
Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to…
Not rated