critical9.8
CVE-2021-22652
Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the c…
Impact
Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advantech | Iview | before 5.7.03.6112 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/161937/Advantech-iView-Unauthenticated-Remote-Code-Execution.html
- https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02
- http://packetstormsecurity.com/files/161937/Advantech-iView-Unauthenticated-Remote-Code-Execution.html
- https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02