CVE-2021-22652

Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution.

Score

CVSS 3.1 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2021-02-11

Last modified

2024-08-03

Weaknesses

CWE-306

Affected products

• Iview (Advantech)

References

• http://packetstormsecurity.com/files/161937/Advantech-iView-Unauthenticated-Remote-Code-Execution.html
• https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02