CRITICAL🇵🇱 Wersja polska

CVE-2021-32930

CVSS 9.8v3.1pub. 2021-06-11upd. 2024-11-21

The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and execute arbitrary code on the iView (versions prior to v5.7.03.6182).

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Advantech Iview

    APP
    Advantech
    < 5.7.03.6182
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2022-50595CRITICAL9.3PL ✓same product

Advantech iView — Auth Bypass + SQL Injection prowadzący do RCE

CVE-2022-50593CRITICAL9.3PL ✓same product

Advantech iView – Auth Bypass + SQL Injection prowadzące do RCE

CVE-2022-50592CRITICAL9.3PL ✓same product

Advantech iView – Auth Bypass i SQL Injection prowadzące do RCE

CVE-2022-2143CRITICAL9.8PL ✓same product

Command Injection w Advantech iView umożliwiające zdalne RCE

CVE-2021-22652CRITICAL9.8PL ✓same product

Brak uwierzytelnienia w konfiguracji Advantech iView — RCE