CVE-2023-3983 — n/a / Advantech iView

CVE-2023-3983

n/a / Advantech iView PUBLISHED

Description (CNA)

An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752. An authenticated remote attacker can bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform blind SQL injection.

Affected (CNA)

Vendor / product	Versions
n/a / Advantech iView	affected versions prior to v5.7.4 build 6752

CWE

No CWE identifiers supplied.

References

https://www.tenable.com/security/research/tra-2023-24

ADP enrichment

CVE

No English description supplied.

https://www.tenable.com/security/research/tra-2023-24

CISA-ADP

No English description supplied.

No references supplied.