CVE-2023-3983: SQL Injection
An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752. An authenticated remote attacker can bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform blind SQL injection.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-3983?
CVE-2023-3983 is an authenticated SQL injection vulnerability in Advantech iView versions prior to v5.7.4 build 6752.
What is the severity of CVE-2023-3983?
The severity of CVE-2023-3983 is high with a CVSS score of 8.8.
How does CVE-2023-3983 impact Advantech iView?
CVE-2023-3983 allows authenticated remote attackers to bypass checks and perform blind SQL injection in Advantech iView.
How can I fix CVE-2023-3983?
To fix CVE-2023-3983, users should update Advantech iView to version 5.7.4 build 6752 or above.
Where can I find more information about CVE-2023-3983?
You can find more information about CVE-2023-3983 at the following link: https://www.tenable.com/security/research/tra-2023-24