CVE-2022-2136: Advantech iView
Published Jul 22, 2022
·Updated
The affected product is vulnerable to multiple SQL injections that require low privileges for exploitation and may allow an unauthorized attacker to disclose information.
Affected Software
2 affected componentsFixes available
Advantech iView_7_04_6469<5
5
Advantech iView<5.7.04.6469
Remediation
Information
Advantech recommends updating firmware to Version 5_7_4_6469 to address these vulnerabilities.
Event History
Jul 22, 2022
CVE Published
via MITRE·02:58 PM
Data Sourced
via MITRE·02:58 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-2136?
CVE-2022-2136 is a vulnerability that allows an unauthorized attacker to perform multiple SQL injections in Advantech iView.
2
How severe is CVE-2022-2136?
CVE-2022-2136 has a severity rating of 6.5 (High).
3
How does CVE-2022-2136 affect Advantech iView?
CVE-2022-2136 affects Advantech iView by enabling multiple SQL injections that can be exploited by an attacker with low privileges.
4
What version of Advantech iView is affected by CVE-2022-2136?
Advantech iView version 5.7.04.6469 is affected by CVE-2022-2136.
5
How can I mitigate the risk of CVE-2022-2136?
To mitigate the risk of CVE-2022-2136, it is recommended to update to a version of Advantech iView that is not affected by the vulnerability.