CVEvulnerability
CVE-2021-22652
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-02-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-306
Description
Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution.
Affected configurations
• advantech iview (< 5.7.03.6112)
Related
Weakness · CWE (1)
- CWE-306 Missing Authentication for Critical Functionality weakness
References
- http://packetstormsecurity.com/files/161937/Advantech-iView-Unauthenticated-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry
- https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02 Third Party Advisory, US Government Resource
- http://packetstormsecurity.com/files/161937/Advantech-iView-Unauthenticated-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry
- https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02 Third Party Advisory, US Government Resource