Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-controlled string in the construction of SQL queries. An attacker could extract user credentials, read or modify information, and remotely execute code.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | Advantech iView | affected |
|
No data.
No data.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2020-6633 | Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-controlled string in the construction of SQL queries. An attacker could extract user credentials, read or modify information, and remotely execute code. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: icscert
Published:
Updated: 2024-08-04T12:46:34.614Z
Reserved: 2020-06-19T00:00:00.000Z
Link: CVE-2020-14497
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-07-15T02:15:12.547
Modified: 2024-11-21T05:03:23.890
Link: CVE-2020-14497
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses