CVE-2022-2143

The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.

Score

CVSS 3.1 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-07-22

Last modified

2025-04-16

Weaknesses

CWE-77

Affected products

• Iview (Advantech)
• Iview (Advantech Iview)

References

• http://packetstormsecurity.com/files/168108/Advantech-iView-NetworkServlet-Command-Injection.html
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03