by Kastro
Paper/Archive/CVE-2020-14497

CVE-2020-14497

icscert — Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-co…

EPSS 5%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 92.1.921 × 2018.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-controlled string in the construction of SQL queries. An attacker could extract user credentials, read or modify information, and remotely execute code.

Affected

ProductAffectedFixed inSource
Advantech iViewVersions 5.6 and prior–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refzerodayinitiative.com/advisories/ZDI-20-847refzerodayinitiative.com/advisories/ZDI-20-827refzerodayinitiative.com/advisories/ZDI-20-868refzerodayinitiative.com/advisories/ZDI-20-852refzerodayinitiative.com/advisories/ZDI-20-862refzerodayinitiative.com/advisories/ZDI-20-860refzerodayinitiative.com/advisories/ZDI-20-846refzerodayinitiative.com/advisories/ZDI-20-844refzerodayinitiative.com/advisories/ZDI-20-845refzerodayinitiative.com/advisories/ZDI-20-855refzerodayinitiative.com/advisories/ZDI-20-857refzerodayinitiative.com/advisories/ZDI-20-854refzerodayinitiative.com/advisories/ZDI-20-864refzerodayinitiative.com/advisories/ZDI-20-849refzerodayinitiative.com/advisories/ZDI-20-832refzerodayinitiative.com/advisories/ZDI-20-835refzerodayinitiative.com/advisories/ZDI-20-848refzerodayinitiative.com/advisories/ZDI-20-838refzerodayinitiative.com/advisories/ZDI-20-850refzerodayinitiative.com/advisories/ZDI-20-856refzerodayinitiative.com/advisories/ZDI-20-866refzerodayinitiative.com/advisories/ZDI-20-842refzerodayinitiative.com/advisories/ZDI-20-837refzerodayinitiative.com/advisories/ZDI-20-865refzerodayinitiative.com/advisories/ZDI-20-851refzerodayinitiative.com/advisories/ZDI-20-828refzerodayinitiative.com/advisories/ZDI-20-853refzerodayinitiative.com/advisories/ZDI-20-843refzerodayinitiative.com/advisories/ZDI-20-839refzerodayinitiative.com/advisories/ZDI-20-858refzerodayinitiative.com/advisories/ZDI-20-830refzerodayinitiative.com/advisories/ZDI-20-861refzerodayinitiative.com/advisories/ZDI-20-863refzerodayinitiative.com/advisories/ZDI-20-869refzerodayinitiative.com/advisories/ZDI-20-833refzerodayinitiative.com/advisories/ZDI-20-836refus-cert.cisa.gov/ics/advisories/icsa-20-196-01