CVE-2021-22652: Critical severity Advantech iView versions prior to v5.7.03.6112 vulnerability
Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Advantech iViewto a version that resolves this vulnerability.Fixed in 5.7.03.6112
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-22652.
What is the severity of CVE-2021-22652?
The severity of CVE-2021-22652 is critical with a CVSS score of 9.8.
Which software versions are affected by CVE-2021-22652?
The Advantech iView versions prior to v5.7.03.6112 are affected by CVE-2021-22652.
What is the CWE ID of CVE-2021-22652?
The CWE ID of CVE-2021-22652 is 306.
How can an unauthorized attacker exploit CVE-2021-22652?
An unauthorized attacker can exploit CVE-2021-22652 by accessing the Advantech iView configuration without authentication, allowing them to change the configuration and potentially execute arbitrary code.