PT-2025-29177 · Advantech · Advantech Iview

·

CVE-2025-48891

·

Publicado

2025-06-13

·

Atualizado

2025-07-11

CVSS v2.0

8.0

Alta

VetorAV:N/AC:L/Au:S/C:C/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Advantech iView (affected versions not specified)
Description: A SQL injection issue exists in Advantech iView, potentially allowing an authenticated attacker with user-level privileges to disclose information or cause a denial-of-service condition. The vulnerability is located within the CUtils.checkSQLInjection() function.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2025-08971
CVE-2025-48891

Produtos afetados

Advantech Iview