Beveiligingsadvies

CVE-2025-53475

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-10 23:23:38

Laatst bijgewerkt 2025-07-11 13:39:39

Toegewezen door icscert

CVSS-score 8.8

Status PUBLISHED

Beschrijving

A vulnerability exists in Advantech iView that could allow for SQL injection and remote code execution through NetworkServlet.getNextTrapPage(). This issue requires an authenticated attacker with at least user-level privileges. Certain parameters in this function are not properly sanitized, allowing an attacker to perform SQL injection and potentially execute code in the context of the 'nt authority\local service' account.

← Alle CVE's bekijken Bekijk op cve.org ↗