Non notée
CVE-2020-14505 Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command…
Description
Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command (“command injection”) vulnerability. Successful exploitation of this vulnerability may allow an attacker to send a HTTP GET or POST request that creates a command string without any validation. The attacker may then remotely execute code.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Advantech iView | Versions non publiées |
Références
- us-cert.cisa.gov us-cert.cisa.gov
- www.zerodayinitiative.com www.zerodayinitiative.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Advantech iView
Les 13 CVE de Advantech iView →
CVE-2023-3983
An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752
Non notée
CVE-2022-3323
An SQL injection vulnerability in Advantech iView 5.7.04.6469
7.5
Élevée
CVE-2021-22652
Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow…
Non notée
CVE-2021-22656
Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to…
Non notée