CVE-2021-22652: Critical severity advantech iview vulnerability
Published Feb 11, 2021
·Updated
Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution.
Affected Software
2 affected components
Advantech iView versions prior to v5.7.03.6112
Advantech iView<5.7.03.6112
Event History
Feb 11, 2021
CVE Published
via MITRE·04:06 PM
Data Sourced
via MITRE·04:06 PM
DescriptionWeakness
Aug 3, 2024
Data Sourced
via ICS·06:54 PM
SeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-22652.
2
What is the severity of CVE-2021-22652?
The severity of CVE-2021-22652 is critical with a CVSS score of 9.8.
3
Which software versions are affected by CVE-2021-22652?
The Advantech iView versions prior to v5.7.03.6112 are affected by CVE-2021-22652.
4
What is the CWE ID of CVE-2021-22652?
The CWE ID of CVE-2021-22652 is 306.
5
How can an unauthorized attacker exploit CVE-2021-22652?
An unauthorized attacker can exploit CVE-2021-22652 by accessing the Advantech iView configuration without authentication, allowing them to change the configuration and potentially execute arbitrary code.