critical9.8
CVE-2022-2143
The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.
Impact
The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advantech | Iview | before 5.7.04.6469 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/168108/Advantech-iView-NetworkServlet-Command-Injection.html
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03
- http://packetstormsecurity.com/files/168108/Advantech-iView-NetworkServlet-Command-Injection.html
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03