PT-2025-49175

CVE-2025-13373

·

Published

2025-12-04

·

Updated

2026-10-18

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Advantech iView versions 5.7.05.7057 and prior
Description Advantech iView does not properly sanitize SNMP v1 trap (Port 162) requests, potentially allowing an attacker to inject SQL commands. The vulnerability exists due to insufficient input validation when processing SNMP v1 traps received on port 162. An attacker could exploit this to execute arbitrary SQL commands.
Recommendations Update to a newer version of Advantech iView.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')
Related identifiers
CVE-2025-13373
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com