Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Advantech iView
Vulnerability Description
The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Vulnerability Title
Advantech iView 命令注入漏洞
Vulnerability Description
Advantech iView是中国Advantech公司的一个基于简单网络协议(SNMP)来对 B + B SmartWorx 设备进行管理的软件。 Advantech iView 5_7_04_64692之前版本存在命令注入漏洞,该漏洞源于命令中使用的特殊元素的不当中和,攻击者利用该漏洞可以远程执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A