Description (CNA)
Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Advantech iView | affected iView versions prior to v5.7.03.6112 |
CWE
CWE-306
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02
- http://packetstormsecurity.com/files/161937/Advantech-iView-Unauthenticated-Remote-Code-Execution.html
ADP enrichment
No English description supplied.