CVE-2023-3983 | BDVDB-2026-208338 Detail

Advantech iView

Description#

An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752. An authenticated remote attacker can bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform blind SQL injection.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.tenable.com/security/research/tra-2023-24

Exploit#

No public exploit known

History#

Version 12023-07-31Record published in the CVE List.
Version 22024-10-22Most recent update recorded in the CVE List.