CVE-2022-2142
published 2022-07-22CVE-2022-2142: The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attacker to disclose information.
PriorityP432medium5.9CVSS 3.1
AVNACHPRNUINSUCHINAN
EPSS
0.76%
50.6th percentile
The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attacker to disclose information.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| advantech | iview | < 5.7.04.6469 | 5.7.04.6469 |
| advantech_iview | iview | >= All < 5_7_04_6469 | 5_7_04_6469 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gr2v-jw76-jf4q: The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attacker to disclose information
ghsa_unreviewed·2022-07-23
CVE-2022-2142 [MEDIUM] CWE-89 GHSA-gr2v-jw76-jf4q: The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attacker to disclose information
The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attacker to disclose information.
CISA ICS
Advantech iView
cisa_ics·2022-06-28·CVSS 7.5
[HIGH] Advantech iView
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Advantech iView
Last RevisedJune 28, 2022
Alert CodeICSA-22-179-03
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Advantech
- Equipment: iView
- Vulnerabilities: SQL Injection, Missing Authentication for Critical Function, Relative Path Traversal, Command Injection
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an attacker to read or modify sensitive data, disclose information, or execute arbitrary code.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
The following versions of
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-07-22
Published