CVE-2021-32930
published 2021-06-11CVE-2021-32930: The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and execute arbitrary…
PriorityP269critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
8.05%
94.1th percentile
The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and execute arbitrary code on the iView (versions prior to v5.7.03.6182).
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| advantech | iview | < 5.7.03.6182 | 5.7.03.6182 |
| advantech | iview | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Vulnerability is exploitable remotely with low attack complexity and no authentication required (CVSS AV:N/AC:L/PR:N/UI:N); monitor for unauthenticated configuration-change requests to Advantech iView management interfaces ↗
- →No known public exploits specifically targeting this vulnerability at time of advisory publication; prioritize detection of anomalous unauthenticated access to iView configuration endpoints ↗
- ·CVSS v3 base score for CVE-2021-32930 (Missing Authentication) is 7.5, not 9.1; the 9.1 score applies to the companion SQL injection vulnerability CVE-2021-32932 ↗
- ·A companion SQL injection vulnerability (CVE-2021-32932, CVSS 9.1) also affects the same product and versions; both should be remediated together by upgrading to iView v5.7.03.6182 ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jf63-8279-v8vq: The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and execute arb
ghsa_unreviewed·2022-05-24
CVE-2021-32930 [CRITICAL] CWE-306 GHSA-jf63-8279-v8vq: The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and execute arb
The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and execute arbitrary code on the iView (versions prior to v5.7.03.6182).
CISA ICS
Advantech iView
cisa_ics·2021-06-03·CVSS 9.8
[CRITICAL] Advantech iView
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Advantech iView
Last RevisedJune 03, 2021
Alert CodeICSA-21-154-01
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.1
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Advantech
- Equipment: iView
- Vulnerabilities: Missing Authentication for Critical Function, SQL Injection
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an attacker to disclose information and perform remote code execution.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
The following versions of Advantech’s iView product are affected:
- iView versions prior to v
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-06-11
Published