PT-2021-19978 · Advantech · Iview

Enesdex · Published 2021-06-07 · Updated 2021-06-23 · CVE-2021-32930

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Advantech iView versions prior to v5.7.03.6182

Description The issue is related to missing authentication in the configuration of the affected product, potentially allowing an attacker to modify configurations and execute arbitrary code.

Recommendations For versions prior to v5.7.03.6182, update to version v5.7.03.6182 or later to resolve the issue.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2021-32930

ZDI-21-648

Affected Products

Iview

References · 4

• https://osv.dev/vulnerability/CVE-2021-32930 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-21-648 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-32930 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsa-21-154-01 · Note