OpenCVE

The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Advantech	Iview

Configuration 1 [-]

cpe:2.3:a:advantech:iview:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03

History

No history.

MITRE

Status: PUBLISHED

Assigner: icscert

Published: 2022-07-22T14:58:45.454785Z

Updated: 2024-09-16T23:42:01.981Z

Reserved: 2022-06-20T00:00:00

Link: CVE-2022-2135

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-07-22T15:15:08.117

Modified: 2024-11-21T07:00:24.077

Link: CVE-2022-2135

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "iView", "vendor": "Advantech iView", "versions": [{"lessThan": "5_7_04_6469", "status": "affected", "version": "All", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "rgod, working with Trend Micro\u2019s Zero Day Initiative, reported these vulnerabilities to CISA"}], "datePublic": "2022-06-28T00:00:00", "descriptions": [{"lang": "en", "value": "The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "description": "CWE-89 SQL Injection", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-07-22T14:58:45", "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03"}], "solutions": [{"lang": "en", "value": "Advantech recommends updating firmware to Version 5_7_4_6469 to address these vulnerabilities."}], "source": {"advisory": "ICSA-22-179-03", "discovery": "EXTERNAL"}, "title": "Advantech iView", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "ics-cert@hq.dhs.gov", "DATE_PUBLIC": "2022-06-28T17:00:00.000Z", "ID": "CVE-2022-2135", "STATE": "PUBLIC", "TITLE": "Advantech iView"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "iView", "version": {"version_data": [{"version_affected": "<", "version_name": "All", "version_value": "5_7_04_6469"}]}}]}, "vendor_name": "Advantech iView"}]}}, "credit": [{"lang": "eng", "value": "rgod, working with Trend Micro\u2019s Zero Day Initiative, reported these vulnerabilities to CISA"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-89 SQL Injection"}]}]}, "references": {"reference_data": [{"name": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03", "refsource": "MISC", "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03"}]}, "solution": [{"lang": "en", "value": "Advantech recommends updating firmware to Version 5_7_4_6469 to address these vulnerabilities."}], "source": {"advisory": "ICSA-22-179-03", "discovery": "EXTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T00:24:44.328Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03"}]}]}, "cveMetadata": {"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "assignerShortName": "icscert", "cveId": "CVE-2022-2135", "datePublished": "2022-07-22T14:58:45.454785Z", "dateReserved": "2022-06-20T00:00:00", "dateUpdated": "2024-09-16T23:42:01.981Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}