CVE-2022-2136

The affected product is vulnerable to multiple SQL injections that require low privileges for exploitation and may allow an unauthorized attacker to disclose information.

Score

CVSS 3.1 8.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-07-22

Last modified

2025-04-16

Weaknesses

CWE-89

Affected products

• Iview (Advantech)
• Iview (Advantech Iview)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03