Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: Advantech iView 5.7.04 build 6425 Clear all filters
TI-2022-26069 CVE-2022-50595 · GHSA-7gp7-vv9p-9rw8

Advantech iView < v5.7.04 Build 6425 ztp_search_value Parameter SQL Injection RCE

Priority MEDIUM 49

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0067 Published 2025-11-06 Fixed in 5.7.04 build 6425 CWE-306
TI-2022-26065 CVE-2022-50591 · GHSA-65rh-73gq-wf9h

Advantech iView < v5.7.04 Build 6425 ztp_config_id Parameter SQL Injection Information Disclosure

Priority MEDIUM 45

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00527 Published 2025-11-06 Fixed in 5.7.04 build 6425 CWE-306
TI-2022-26067 CVE-2022-50593 · GHSA-32gj-59h5-4jf2

Advantech iView < v5.7.04 Build 6425 search_term Parameter SQL Injection RCE

Priority MEDIUM 47

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0073 Published 2025-11-06 Fixed in 5.7.04 build 6425 CWE-306
TI-2022-26066 CVE-2022-50592 · GHSA-qqgx-j7v5-7wrr

Advantech iView < v5.7.04 Build 6425 getInventoryReportData Parameter SQL Injection RCE

Priority MEDIUM 49

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0067 Published 2025-11-06 Fixed in 5.7.04 build 6425 CWE-306
TI-2022-26068 CVE-2022-50594 · GHSA-g2xr-8jgc-jrmr

Advantech iView < v5.7.04 Build 6425 data Parameter SQL Injection Information Disclosure

Priority MEDIUM 45

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00486 Published 2025-11-06 Fixed in 5.7.04 build 6425 CWE-306