Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command (“command injection”) vulnerability. Successful exploitation of this vulnerability may allow an attacker to send a HTTP GET or POST request that creates a command string without any validation. The attacker may then remotely execute code.
CVSS Information
N/A
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Vulnerability Title
Advantech iView 命令注入漏洞
Vulnerability Description
Advantech Iview是中国Advantech公司的一个基于简单网络协议（SNMP）来对 B + B SmartWorx 设备进行管理的软件。 Advantech iView 5.6及之前版本中存在命令注入漏洞，该漏洞源于在进行系统调用之前，程序没有正确验证用户提交的字符串。攻击者可利用该漏洞发送HTTP GET或POST请求，执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A