CVE-2021-22652 | BDVDB-2026-149096 Detail

Advantech iView

Description#

Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-306 Missing Authentication for Critical Function

References#

https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02
http://packetstormsecurity.com/files/161937/Advantech-iView-Unauthenticated-Remote-Code-Execution.html

Exploit#

No public exploit known

History#

Version 12021-02-11Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.