by Kastro
Paper/Archive/CVE-2020-14503

CVE-2020-14503

icscert — Advantech iView, versions 5.6 and prior, has an improper input validation vulnerability.

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 89.1.891 × 2017.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Advantech iView, versions 5.6 and prior, has an improper input validation vulnerability. Successful exploitation of this vulnerability could allow an attacker to remotely execute arbitrary code.

Affected

ProductAffectedFixed inSource
Advantech iViewVersions 5.6 and prior–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refus-cert.cisa.gov/ics/advisories/icsa-20-196-01refzerodayinitiative.com/advisories/ZDI-20-834