CVE-2022-50593: Advantech iView < v5.7.04 Build 6425 search_term Parameter SQL Injection RCE
Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘searchterm’ parameter to the ‘NetworkServlet’ endpoint. Successful exploitation allows for remote code execution with administrator privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50593?
CVE-2022-50593 is considered a critical vulnerability due to its potential for remote code execution through SQL injection.
How do I fix CVE-2022-50593?
To fix CVE-2022-50593, upgrade Advantech iView to version 5.7.04 Build 6425 or later.
What type of vulnerability is CVE-2022-50593?
CVE-2022-50593 is a SQL injection vulnerability that arises from an authentication bypass in the SNMP management tool.
Which versions of Advantech iView are affected by CVE-2022-50593?
Advantech iView versions prior to v5.7.04 Build 6425 are affected by CVE-2022-50593.
Can CVE-2022-50593 be exploited remotely?
Yes, CVE-2022-50593 can be exploited remotely by attackers to perform unauthorized actions.